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(57) Abstract: 

PROBLEM TO BE SOLVED: To make illegal use by\ 
forgery or duplication extremely difficult, to certify the 
content of a ticket to a third person, and to maintain the 
anonymity of a user at the time of using the ticket in an 
electronic ticket using environment. 

SOLUTION: A ticket preparing part 4 of a ticket preparing 
and issuing device 1 prepares the specification of a 
ticket corresponding to a prescribed service or article 
based on a ticket preparation request A ticket Issuing 
part 5 issues a corresponding ticket by inputting a ticket 
identifier, certifier identifier, ticket specification identifier, 
and ticket additional information based on a ticket lssue 
request. A ticket certifying device 2 holds the ticket 
Issued by the ticket issuing part 5, and certifies the 
holding of the ticket by communicating with a ticket 
verifying device 3. The ticket verifying device 3 holds the 
ticket Identifier and a ticket verification procedure 
prepared by the ticket preparing means 4, and operates 
the verification of the ticket by communicating with the 
ticket certifying device 2. 
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:sS^m2] f^-Jr-v h^ffgg, }^IE^S^ lEB^^a 

its KaM^mmmm^^m^^t. \<^n^n 

'>'5:<i:^iEBJ^g@«+tlfii:7^'!r.y-ht:6>e>f=-r 
S i: *^ ^ 5 c: i: t -r 5 m^^f^^ >y h :^ 7^ A , 

S'Jtf a S iEBg^gg;^ tt^ i: ( j-T -r ^ IIB^^ 
SiaS'Jtf ^^i^^ia ^ US X. fe C i: S:?^sa i: r s ^ 

'rvv ^m^m. L9-^yh mmmnt^ ^ta^^t. 

C^*Ja 6 ] IS3RII 5 iS«o^^5^'5^ -y h ->:^7^ AT- 



(2) 11-31 2,.0 4 

2 

1- 5 a5ttSg^t$#® 5 fit ^ t - i: &^¥SS i: t- ^ m 

^^-r-v h->;^7=-A. 

Clfi}SIS9] It^iISiBSJc^S^^^'y -y ^•>;^7^AT- 
feoT. ±lfiEB^SgOi^gC««|^J^^S;i)i«J#-r5Rl 

CISSS^IO] 5f^JS9f2«<3Da?^'r-y hi';^7^A 

x$>^x. ±^zmMm^it^mttimj^i:>tirzp^s^^m 

jg«T-'>'5:< h*. lS®li5^tS^tc§g-rs*DS©IEB^® 

Csf 5t?ii 1 2 ] 1 0 i2«©S^=^f^'r y h '>^9- 

AT-S»oT, 'J^^SK lS{iffiB^Sg(Z)F^a5fi??gA»e, 
ttS^±i2IEBJSgi)^ ±i2t^lE^Sic:fi^-r 
5 CI i: $:^^i:1-5fl^f=-'5r «y h i^;^?^ A, 
20 CIS5R)J 13]. If 5)?« 1 2 l2S(^S^5^'!r <v h '>;^7^ 
AT-S>oT. < i: 1 Sti. ^35*^5. St i$lx.^tg 
'&±32EB^SacDl^a5tf ?>f^ e>i^5tt^S:±l2tEB^ 

[iS3RJi 1 4 ] snmm 9 S l O l2«©S?f=-^r >y 

hl^T.y'J^X^^X. ±i2iEH^^g®f^a5tt«|«}t^lS 

30 nc^Ti'^'T^y ht^m^^x^^^cotLx. nm&m^'c 

®C i: f S >y h :^ 7^ A , 

[ffS5i?«i5] isaRjs 1 4i2«gom?5^'r<v h->;^7^ 

AT-go-C. ±l2t^lE^Sf±'>'S;< i:^ 1®, ±I2IEb^ 
^aJctS^SSMU, ±!2liEB^Sgtt. ±l2t^lESSi)^ 
bB^^ti^mmzLTzt^^X. h t^}^Mii-^ 

40 A, 

[ts^m. 1 6 ] mtum 9 s i o i2«®m?f^'ir -y 

h->;^7^AT-^o-C. ±l5IEB^^g©i^g0t^.^«}^^iS 

ntssEm(D^mx^^ y voi^o^^ii uT«iig-rsf^ 

fsilt" o - ^iS^-f-'ir -y h->:^7^A, 

50 (lf>f?iS17] IS5RJa 1 ewil^f^'r'y h->^^7^AT- 



(3) 

3 

icttasfi^u, ±fim.smmit. ±tmi£^m.t''i>B 
[!S5Rii 1 8 ] smm 2-17 (Dt.^rtiifiizt^m(D^ 

[sf^ril9] Ig3£ii2~ 1 7c^i>rni>{cl2S®S 
^15! # CD 'i> Jfe < i: - as CO ;^ 7^ «y 7" i£ SB iE b fc 7- D 7 

lE^Mt^c^Jl^T^ ±iBt^iEsas3it>-±i2iEBi^i:^ 20 

■ C!S5t<rS 2 1 ] SS^m 2 ~ 2 0 ®v^-ri^7!)»{ci^m<om 
^^-^r.;; hf^;;^7^AT-$>oT> ±I2t^lE^Ste^ig1*IE 
^S! t {3 V ^ T ±f BIEB^Sa {c 0 tsa® 5fefix; {C W 

mi^tzm^iis ±iBiEB^aa45j-|gtt^(cjg^^ssuT 

>;/ h i'J^T^A, 

cisjkjs 2 2 ] m^m 2 ~ 2 i cDVNrni^tciBsacDS 30 

^^-y hi^mr^^^y h^^^^^m^. Pits 
[tn^m 2 3 ] tn>stm 2 ~ 2 2 cDl,^r^^i^{ciB®om 

IEB^^ag*-tf i ft mS©:^ j£T-IEB3ttS$rtt^^ 

ggm^ds (n, E) T-S»7> A (n) 6SiSnOTT-(4IS 
i^fi:^i:'£5StC3{aiST-S ^)^ ED = 1 mod A 
(n) T-S!3, 5=-'5r-y h©mDtS^3bsLT-S»5, lEBflS 
aa«tf^3!)i?ijggcD-^fqit*Eg|g!fdu (L, n) T-« 
5. ^^^-i/ Vt^t : =D-du (L. n) X^X-t^tlX 
±l2IEB3^a(3:, ^IEtSiaCCC)ttL-C. lEH^ 
tSI5R^C<;3j£nT-<Dt{Zi;SSmi:. C<Z>tonT-®- 
:^|SH*g|i!Sfadu (L, n) Srliatf SSJMi:Oi£n 50 



1 1 - 3 1 2. 0 4 

4 

-C-^ftC'C""- mod Hi: UTlEBfltS«$:|+^ 

[Smm 2 5 ] ISS^lfl 2 3 !B«2®S^5^^ -v h •>;^5^ 

(755jgatt^6^ (n. E) T-*!3, ED= Imod A 
(n) bCD{^jiOtS$Stf LT-^ft^ lEBJ^ 

aS*tSfSi>5^5^0MduT-^ f (d„. L. n) ^: 
-;^(oH£glSSti: UT. f=-'5r.> hi)Jt : =D-f (du, 
L. n) T-#x.e.ftTi.^Sh#v ±i2ffiB^sa{i^ i?.IE 
tf^CCMLT^ EB^tilffiR$:CcD?£nT-cDt iCJ:5S 
Mi:. CcDi£nT-0-:?[pH£g|iaflf (d„. L. n) 
S?ii!Si:1-'5^Si:Oi£nT-©«C 'C mo 

itS^m 2 6 ] o^^« 2 3 la^ODS^^f^-ir .y h ->;^ 7^ 

AT-«oT, ^<ry h(D^mmwLtixx^>). Pimm 

(p. G. s, y) T-SDs y = g'T-fe?3. ^^'ir-yl- 
COfTADtf^i^LT-^. i3> EB^^ag*tf^3!)^lt5S5cO— 
|SH4^3Sdc (L. y) T-« hi^t : =x- 

du (L. y) T-4-^?)ix-CVN5i:&, ±!BIEB^^a 

i-^mmL. c(D-yj{^iimiSLm.d^ (l, y) srjisc 

i:t- ?.S*i:0«C'C""'"" i: b-CliEB^tf^$:itp:1- 
S C i: i: r 5 S^^f=-'5r h- •> ;^ 7^ A = 
CiS*JS2 7] S|jKJS2 3l3®©S?f=-ir-y hi>;^7^ 

O^&gitS^A^ (p, G, g. y) X-^'O. y^s^X-^ 

4s|5ScDflduT-S f (do. L, y) 4— ;«-fpH4§l 
iSi:bT> f^r-yhist :=x-f (du, L, y) T 

^^c,nTt^si:t, ±i2ii£H^^afi, mmmWiCizpt 

UT. IEBgm^R4C©tS:Ji^i:t-5SMi:> C©- 
:S-[SJ*4§l^fBf (du. L. y) SliiBch-r 5SMi:<^ 
^C'C " i: UTlEB^+f^^itSCI-SCi:^^^ 
Sct-rSS^^^'Jr-y N->;^7^A, 

[Sfssjs2 8] ssmm2 3i&m<^m.^^^y \">:^T■ 
U> IEB^W^6SiELV>ig^{i. liEB^fS^CCHtoii^nt 
A, 

(ISsRii 2 9 ] ISJJSII 2 8 IBfJcDS^^T^'i^ -y h ->;^7' 

t^^yh^SSmm (n, E) i:(73ig^. lEB^tSiaRs: 
?£nT-EM0S:i,(7)SCi:tfc«<U, ^ 5 -y h?'J.MisS5 
oT, R^mod n = C||M(Ci:Mi:CDl^-yl-S 
*5) t:'SoTl-^^^^SI^B§tff^{iiELl^i:^]:SUs iEBfltf 



(4) 

5 

3 0 ] tS^m 2 8 tdm(Dm^^^ yh'>7.9- 
t^^y h^mm^ (n. E) ta^m-^s 

1 } !S^«2 3Bm(D'm^^^y hi^P^T- 10 

5EtsigsfhStL, uiEtf^tc^^bT. miz^^yvm^ 
^ « e V X it W ^ JSr c: i: J; o T IE B^tS^ ^fiK r 

(Dmmnii^i^xh^. m.m^mmmmm^&^^^jh 

(D I ID X^^^ixx^^^ii^. T^-tr-y h t ^dc 
A, 

imtstm. 3 3 ] if 3?ja 3 1 laso^^^^'ir h 

AX^^Xs T^^y hcD^mtS^ifiBX^K). =f-^yY 
©CtAafS^A^LT-S. BEB^^g@Wtt^A^S-5.fii?^JS 
®3[^Sd„T-S t)s iEB^^S@Wtt^{cJ^j^>-r5Bf^ 
{b«:E„i:U> h (L) r=H£l|gSfi: UT, ±iaiE 

B^SStt. T^'^r-y hdst : =E„ (D | | h (L) ) T" 30 

^^(SH£gliKfiSh (L) S:tt^1-.SC:i:{cj: !3. LO^ 

A, 

ClffsR^ 3 4 ] ?if«^ 3 1 ia«20S?5^-:r <y h i^;^ 
AT-SoT. h(Dm^'mm.i^DX^iy. f-^^h 

®ft»atf?gi^LT-S) (?: lEBJ^a^Wtt^i^fe'SSi^^?^ 

ib^E^tL. h (L) $-;5-rsn*5lSri: L-r, ^^-y 40 
hist : = (Eu (D) . h (d„ I I D I ID) T"-^ 

X'^tix^^^t^. ±nimBMmm(±^^y h tcDfs IBS. 

L, ^-r -y h tco^2fiX^i:-;«rfSH£53iSfah (du I 
I D I ID t^it^i- ^ z tlz x^x^^ y hmam 

-> ^ 7^ A o 

CIS5SII3 5] IS5RII2 8~3 0©i,NT^l6^tCie«<75 
^T^f^-ir -y h :^;^7^A-C-^>oT> ±ie!EB^^g(+. ffl:^ 
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C ISSSifl 3 6 ] §t5}5« 3 5 ISSico 5^ ■r -y h •> 7^ 

mi] 

mod n 

t LTH-pci-5Ct£4^aSi:-rsm?f^'5^>y hi';^?^ 

A, 

[IS*'^ 3 7 ] ISJISJB 3 5 IS^CDS^ f^-ir -y h i^;^ 5^ 
A-^feoT. ±lglEB^Sa<i. aj;t!«^«^¥^g!£^^ 

tJiM^^n^^izgkm^tirziiitimn^m^^xmmmm 

CiiS^^gtiil-SS^f^'Jr.y h->^7^A, 

im^m 3 9 ] isssjs 2 3 tzm(^m^9-^ y h •y^y' 

S2cDl?.Etf^i:M2 0iI^m^i:f^'ir-y b/t 

L> m2CDiEB^ft^iJIEUV>S^. ±iBiEB^^aOf*!a5 
^m^WSr-t^Zt^l^hrZ^^^^y h'>:^7- 
A, 

ciS33<;s 4 0 ] m^m 3 9 lamws^^'i^ <y h ->;^ 5^ 

A (v) {^^v^tc^i: UT, ±i2iEs^^a{i, ^2«^ 
ffitfS;*: 2 o:>mBmmpt^ 
C»2] 

X = fl' mod 

$:«Sfer i: # tcB 2 OlEB^tff ^i^IE L !/> t ^^J^-r S - i: 
-y l-v';^7^A, 

^'^H. ±SgiEB^Sali^ ^2 0^IEW^ff'i:^2® 
lIB^tSSpis 
(i»3 ] 

p = V' mod p 
l-t t {c« 2 ©lEB^mffidsiE 5 c i: 

Sl^St i: 1- a S^f^'!?- -y I- ■> ;^ 7^ A . 

AT-35 0T. ±|glEB^sa(i. A±;tf?a{Sf$^S!2r?^ 
*). m2cOiE3^ttai«iELi.>ig^(i, ^ 2 ©lEBS+f fgic 



(5) 

7 

[tmrn 4 3 ] tmm 4 2 igssom^^'r h •>;^7=- 

[JS4] 

X I I /i = ;0' mod V 

2CDlEB§tgSipisi$:^«5#x.fcfS|^i:UT. fe5>u< 

£ ^ 20 
X — P mod V 

S:?Sfe-rh§ic:m2CDlEB^tf^isiEbi/^t^JSU. x^S 
m2®IEB^It^{cJiii>ii^nfeA:t;tS?5i: bTA:t;tt^ 

A-CSoT> ±iaiEB^Sgtt, A;^tflS«^^g!^^ 

^f^ScilTSm^^f^'J^-y h->;^5^A. 30 
CSf^iS 4 6 ] IS^ii 2 3 leSOS^ .y h 7^ 

A-c-^>oT, ±i3iE^^sii> mmm^t^^y hma 

filSI- 5 c t -r 5 m^^f^-r -y h i^^ 7^ A, 

C!f 4 8 ] mmm. 2 3 fdm<Dn^^^ •yh->:^7- 
AXSi-oX. ±i2IEB^^Stt, rtlii5tt«8i:5^'>->y hft*Q 40 

mmiiizm-:s^^x. mtimn^sfwu. mtimm^n^ 

Clf^IS4 9] 11^112 3iaiE<DS^f^<r>y 
AT-^oTx ±l2t^lE^a(S. m2<7)^IEtS^i:#ffi5: 
^-raJSBtf ^i: J; t3 ^ 2 CDffiB^m^^^fiEf CI i: 

fir^filfgz: (v, £) tUT. fcJsi mod A 
(i/) 2bsiSfc?ni.i:S. ±iet^lE^ga. m2©l?.IE 50 
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8 

ma a: <t !3 ^ 2 (TDlEB^tf Ifi p ^ 

O : — mod 1^ 

Ao 

^^ggtf^^ (p. s. q, 77) tux, 

T) = mod p 
!3m2cOlEB^tjiap^ 

p '. = mod p 

A, 

[IS^«5 2] gS^JS4 9. 5 O^tttS li2«4®m 

B?i2^«^«t-ia^ts«5fflv^ttt 

i:^ 2 (Dmrnmn^ J; i? m 2 ©lE^ff ^5:ff-S1-S ^ 

[§S^iS 5 3 ] mtStr^ 5 2 l2®6Dm^5^'ir ^y h S^:^?^ 

^igamaS (v. £) i:bTx £<5= Imod k 
(v) tfgffe^n5i:§> ±l2t^iE^g(i> X^btflS^ 

►}m2cr)IEB^ftapS: 
Cg!c9] 

p : = ^ mod V 

ti^x^n^t^nmiiT^m'Fy^^'y h-y^y" 

A, 

CaS^IM5 4] If?3jc]a4 9. 5 0 Sfcfi 5 1 IgSO^ 
^f^-i^'y h •>:^7^AT:S>oT> ±32li^lE^g(i> A^JtS 
S^J^^SSrJ^t., Hai21^«$:S-f^i5^m^*«<'^S:t1- 

^ ^ t ^ T» 2 ® ^lEtSa ^ Slif 1- 5 i: i: ^ 5 S 

[!f5}c;S5 5] ifS£li5 4l2S«<cm^^'5^-^ f^i'^T^ 
AT-feoT. ±i2t^lE^gi±v A:tltS®«^T^SS^ 
^, A;^«^^it¥l6ic^^^ntA±;ma«>£ifc 
M2 0g5IEft^5:;?:i:t- Si:. ^ 2 O^-IEff I I 

f^-r-y hSr^ffr-SS^^^'T -y ^^^fsa^c^Jl-^•r, 
'>'3:< ir^^T^-^-y Mg^tSfB€{Sj#-r 55^-^^ -y h.l^^tf 
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{Mm. 5 8] m\ ^^^r ^^rv^ ;i/tt^i» t^^ti.^ 

#fJ^#@«tS?8{cm^©)||^ 5: H^f U T ^fiZ ? n C i: 
C!5I3R« 5 9] ffiw ^ a^f s 7=^-:^ cS' ;utgiai» ^ jS; s 

'i^^< i:^±i2f^'5r-v h?iJffl#gWtt^ii±i2f^'r _ 

fclEB^tS«^fefeIEUT±l2a^f^'^>y MEB^SSCSJ^ 
#tf±i2«*iJ«:W1-i.C t^t^lEr5S^5^'ir<i' ^^^IE 

^IE«®Mffi<£^J5K-rs^lS!i:. 30 
fie $ n T t > 5 d i: £ IE -r 5 ^ IS i: ^ =t -r 5 i: S 

CIS5RIS6 1] ^^IE^a^}iuf|iEB^ss^fflv^T^f ^ 

-Jr-y h|g35m^i:IEB^Sg@;g-tS^ti»c,^fi£$ixtr^ 

~y^)\^m^x-^?>^^y h ii. a e^wrsiEBj^sg 40 

*tSlgi:*^e.lEB^fS^«^J52U, ±l2I^^ESatt, ±12 

iEBatfi^is±i25^'r'y M^stf^^cgiau-c^snt 

[0 0 0 1 ] 
[0 0 0 2 ] 

[j^iKo^^Pf] mm^. isff^> Aig#, 50 
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BSi^. sffli^, faa#, T-'j-^-f K*-h\ ;K-r 

[0 0 0 3] CCDi^^^^^r.;/ h^l:CCT-(iiaEf=-':r<> h 
[0 0 0 4] tiS*. S^^^'T -y htt. h<D^im^ 

[0 0 0 5] i:i.T. ^^^mmz-z>^^xm^siBMi-?>o 
[ 0 0 0 6 ] ^ 1 ®eieitEttjff{i> "3^^^ h(DmmmiziE 

it^Stf^) -^x.fc«*iJi:S:?^f£;-:5lti.«^S^'ir>y 

tt. ^ff #tf f^'T -y h tcgj^gSSaSf. S^^SCfe 
[0 0 0 7] ^iE{CS^L'fc5^'5^>y h<^)*'Jffl$:B?ii:t" 5 

#7c2:?<J«f #^IEB^S75:h•5:S^^ 
[0 0 0 8 ] ^2 cOtSasiS'rfftt. ^ff#lU^^C3#«^7^^ 



11 

C O 0 0 9 ] c:©t«3tESlie©-F7irrWM¥ 8-147 
5 0 0■f■5:^-C-gll^^i^T^'^5. c<c:S-i£T-(i, ^iJffl^ 

y btmw-^tizzt^miti^x^'^io c:®;^ffi{c:J;n 
T% aSjCD^^-r-y h^fT#i>s^ff Ut^SiSt^T^'r b 

.. -r ?2 It T-*tiE A* Pitg t: S S . 

CO 0 1 0] m 3J:D^^e3l5filE^sii, w^^<D^{s^^mx 

CO O 1 1] CO;^?ST-l±^ f^-i^-y h^liS^fSffiiibT 

mm ux u :^-!f^>:^i^m^^ titzz t^s^^T ^ ^ t. 

X-. ^<J«#®IE^i42:^.IEr5. ^^'l'>i^t.U7.n'^> 
CO 0 1 2] -b^jL U.7^-i-igSS'NOTi'-tr;^ffJ®C0fe» 

®^iE{cge<]ispis^nTv^54^. ^3©^^£il5^^^Si:lB] 

«£r^6 - 5 2 5 1 8^fi: 
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CO 0 1 3 ] 

xfcffiW«??ST-tTs iE U^^ ^V^y-f-^C3!)•^ ^ 

C 0 0 l'4 ] bfeiSoT. S^^5^^r'5>CI±. »:C0 3 .-^ 

-^^c>nfe'«*<Jrt^SmH#TCIIB^y5^^X^» =t 
^3O^Sg{i"m2©^gg'^S'#LTV>5C0TN S 
1 i:^3CD^tgi>^^jl^nix«> f^-lr^;/ Ktc-iJ^C^tS 

20 .. . g: -r -5 ^tSj>^SI g ^ n -5 C ^ ^ 5 . 

c 0 o"i "sTm 1 ©tieiK&e&T-tt. ^jffl-r-5*j«#^$^ 

CO 0 1 6] l<Jffl#1^:StS^«c?<Jffl^O#x;S:?'Jffl-ri. 
:5irc-(±. %ffB#i:t^E^fC*J«#©#7cA^B^c,4»lC7a 

30 CO 0 1 7] ^e){c. mLmm^^^mm\^rz]Bm^tiimm. 

T- # ^ g :± E Sg f 5 :5 ffi H ^ ^ ti. T t ^ JS; V ^ ® T- . 
CO 0 1 8] » 10Dteit£fe'#t:*JV>T, ?<JS#?tStf^ 

5, St, ^JS#i5fii,t5lc:y"!^-7- KSiSas-a-^-i: 

C'^^S'SiS 1 <Dm^-tfi'M0!.^nx^^rji\,^, 
COO 1 9] miCD'^^mX^-t. ^iJffl#6s«WLTO 

uT^'^■s>, cnj: "5 2o<or=gs6^*i:.s. micorsm. 

its ^ff#lil^^CO#{if=-';r>y hSg^¥T•t'S<'^©T-^ ^ 
-r-y hOiE^f4S:^H#«c:EB^1-5Ci:i^Sli{c:^£5C 
hT-feS. 5=-'r >y h (C.i:>S?5:M&gcoS 3 isit52 

50 CO 0 2 0 ] ^gg^B - 1 4 7 5 0 0-^iifatCBg^.^ix 



I 



(3) 
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CO 0 2 1] ^arotjfeifettjett, mt£<Drzisfnz^im^n 

tf « =£ gg^^ U T liJffl #<D«*J L T 1/ ^5: V > C h IE 

C 0 0 2 2 } 6 -5 2 5 1 8 ^f^igtcga^^nT 
CO 0 2 3 ] ztx^x-izm^tz^oiz. 

.. • C 0 0 2 4 ] 

■ ci?»bi^i:-rsiss]^cT-*^B^(i, ±iBop=ga 
iz^^^iE^\mmmizm[. <. ^2ijj;^^3®^ti 

i:UT, f^-r-J/ KCDI^§$:MH#«ClIBJT-^-r. ^40 

^[0 0 2 5] /■ 

•y hi^:^9-J^lit. .liXT(D^^^y h^if^St^^^y ME 

•y h<j:)^m.mm.tKBMmm(Dmwmm.i>' ^b^^ -y h^rit 

CO 0 2 6 ] h^frSatts -J^-r -^^ hcDl^jatS^ 

tmM^<Dm^mntt-^^^'y h^^^nTi, lEs^^ 

■5. ^t. ^mmmt^m^^t:iffi,xmmL. 

Ptti^'n^ji^K mn^BH^^-^Zztizji-DX^^'y h 
(^mmt^tt $ n 5 , ieb^^m nff ^sa^jii® nff «c is 

t-^T, ^IE^Si»6isfs?n;S:?=--5--y MSS'l^tC^tfEl" 

•y ha^??ffir5ii-&C(i, ■^cDT-'Jr.y h g:^i,>-ClES^^ 
Jig €:^ff 1- i. , lEBfl^llg^llff «C a t o T «iilW«ffi^ 



14 



^tifzp^simn^m'^^izt.t^xa, f-^yhcDmm 
^T'^£^:)^^5, t^iEssa, lEs^^afcae^s^^n-LT 

?tl§<D*gS(CJ:oTEB^^ais:tJSj'5:-f-'r<y 

"~ CO 0 2 7 ] 
SiB^-Ti.. 

1 . mMS.m±<$-<^^S: (12 12. 028. 029) 

2. micDmrnm 

2. 1. ^lE^iS 
. 2 . 2 . ■SSm'&J^-fiST'o (0 1 3. 0 1 9. 13 2 

0) 

20 :s^#ii5^'r-> h 

2. 3. m ICM^ro (014. 019. 02 

1) 

2. 4.^2 cr>n^yu V (015. 019. 02 
2) 

2. 5. m3 fiD^^ISro h- 3;u (016. 019. 02 
3) 

m^^M^^-yh (ffiv>jtT) 

30 2. 6. M4CD^g7*a (01 6. 01 9. 02 

. 4) 

2.7. ^5CD}ir!l-|g7'D (0 17. 019. 0 2 

5) 

:^-$'>rt}— Ym.^T-y V 

2. 8.^6 ®??lgrD hr2)U (018. 019. 02 
6) 

2.9. m7(Dnmya hn;i/ (018. 019. 02 

40 7) 

yi)^'^ i'ti—Y'SL'^^'yh (lf5cJS°Itg) 

2. 1 0. ^ScmST-D hr!;u (0 1 6. 0 1 9. 0 

2 4) 

mWL^^^^ -y V 

2.11. ^9CDm§ro (0 1 8) 

2. 1 2 . ^ 1 OOT^^ISro h (0 I 8. 0.1 9 . 
02 7) 

r 'J -i-r K — K Sf^-y -v h 
50 2. 1 3. ^1 iro?^IS7-n h3;u (i:<iC7SU) 
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2. 1 4. mi 2cDmSra (0 1 9, (2 3 1) 

2. 1 5 . mi acMlgT-D (^30) 

3. m2<Dnmm 

3 . 1 . ISiEf^iS 

3 . 2 . S 1 4(7)?^ISrD hr3;i/ (12 1 3, 12 1 9. 12 

2 0) 

3. 3. mi StD^igro f'n;u(1132, 019.12 

3 3) 

A. f^Zt^Wm ((2 5-12 9) 

5. m'icDnmm ((2 4, 125) . 
[0 0 2 8 ] c 1 . nmm±{i-(Dnm'i 

imi. 02. m3s [212. (228. (229) (21 
*^s^cDS^f="ir«y h->;^7^A©ffifi2E-C*S. Site 

{-^fiS; • ^ff 1 . -J Y SES^^S 2-x iii:.XI=i-fT v 20 
ht^lE^g3$^^T-«fi!^^i^TV^5, ^^-jVi'^^- 

UTi^-- tf^^©a#t^g(tfev>#*feii^®-f<iSA) 

[0 0 2 9] hSEBMmS. 2 (i. ^^-Jr h^ff 

ScD^ff h5{S^U. hi^iE^gS i: 

3 tt. ^^-r -y h {-^fiX^IS 4 ©{-^fiSc U fe^^-ir -y h ISS'J 
(i. f^-r-y hfPfiK • ^fr^g 1. VmM^W2ii 

[0 0 3 0] (22 iJ,i:t>-(2 3 lif^-T -y h^-^fiK • ^ff^§ 
lODffifi2S:±^*i:■UT^LTV^5, St. mi2iif-tr 
•y hlEH^SS2iJ«J:t55^^-y htSIE^a 3®«J522r±» 
i: U■C^UTl'^•5. ^^5. E2iJ.i:i>'(2 3tt(s{S[5l-0 
ffifiKi&TnL-CUi,. teu. (2 2 4s-ase<)^fir5asg-^^ 
$:^IECC^V^i,fi?|J^I5iB^t-5^DC?^(.T. 03iiRSA 

[0 0 3 1 ] (22Ciol,>-C. ^T-y bi'^BS. ■ ^ffSS 1 
{i. ^-r-y h^-tfixiC (^IS) 4. f^>r.yh^?fge (^ 50 



1 1 - 3 1 2,0 4 
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m) 5. f-^r-y hiSSiT^-^"^-;^ 6 ib'=fcUfiiEB^gg@* 
ff^T^— ^'^-:^7§#UTC^^, l2 3Cc:iil<>Ttt. ^ 
f-'ir.y hfiax-^"^-;:^ 8 7iiaS:lt6nTi.^-S, 
f^^r-y hf'^fix -^ff SSI ©PiW (Sj^'^) {co^^Tfim 
3 (3D HJS^JiJ <t t>-m 4 © S L T '^aif 5 o 

[0 0 3 2].0i 2tciba>T. h^&mnzit. 

^St^mm^nBl 1 liiJ;u>-ji/igi5l iZ^^LXis 
tj. ^t. T^-r-y HEB^^a2tt. f^-^-y h^i^gU 1 2 
1 . f^-'T -y h^^^gB 12 2. OWm^ffi^SC 1 2 3 . 1*1 
a5«S^}t53 12 4. lEB^^HiSffas 1 2 SiJiU^ilfs 
as 1 2 6 S:^UTO-S. 
[0 0 3 3] (22 9 (if^'/ >y l-IEBS^a 2 (DKm^mn 
frSCl 2 5©p«fflJ5;«fiK$:^UTtJ t3. St. (2 2 8 fi 
^-Ir-y M^IESa 3 cotfeliE^JlS^ff as 1 1 1 Oi¥^?5:« 
fi24^UT<'^-5. (2 2 8i5J;rjf|2 2 9^c7f^■r«t^^c. * 

^fiajT-(i. lES^Sa 2 ©iEBQ^JlS^frSJ 1 2 5 tt. i£ 

(tas 2 9 K §©aj 2 9 2. mi oig^as 293. m 2 

©«»gB2 9 4. IE^«Et^lEg6 2 9 5, |glEtt^:££Sge 

2 9 6. mmm^^n^ 297. m 2 ©isaEtsa^^su 

2 9 8. ft ^^^giJ 2 9 9. fcB;'7tS^«i$gi5 2 9 1 0. 
Xtimn^^Si2 9 11. gi]»a5 2 9 1 2 i:i»f>fflfiS;? 

[0 0 3 4] t^SESa 3 ©tSIE^MUfrge 1 1 1 ii. 3^ 

ftas 2 8 1. ^mss 2 8 2. mi osscfis 2 8 3. m 2 

cDmWSi2 8 4. IE^<4*felEaJ2 8 5. MMmn^Bx.^ 
2 8 6. S!Em^«J^a5 2 8 7. y K^'J^^i^gP 
2 8 8. ft S^i^gB 2 8 9. Hi^tSSl^SgB 2810. 
A:t;tSliS^gS 2 8 11. mtl^ 2 8 12. A^gB 2 8 
1 3, fJMSES&ff ^«^gi5 2 8 1 4i:>6>«fi£?n5, 
[0 0 3 5] J-;l.T®^J^lCiJi/>TS-^JIIIIfTgi5t:«fiXr 
5^gcr)cfii)>e,,i:.g7S^,0$:^V>TlEB^^|lS ■ t^II^Jlg 

[0 0 3 6] [2. mio^fi^J] ^r^^B^cmic^ 

^3S^J«c:o^,^TgiB^t•5 , 

[2. 1. ^iE#-i£] f^-r -y httf^'T «y h®4^tff^^ 

mm^2(Dm^mmii)'i>^^y ^^^T^a{ci■D-c^ 

[0 0 3 7] 
[iSl 0] 

n = pq. X (n) = lcm(p-l, q-1). 
ClZX-l c mit&'i^-2:{S^^m.t) 
[0 0 3 8] 

[Sit 1 1 ] EDS 1 mod A. (n) 
i^SSt^n-Sht. (n. E) i&SjgaffSii: L. D^Pt 

[0 0 3 9 ] T^'T-y hlif^-'T-y h?fatS^D iilEB^iid 



(10) 
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-C-Sf>. liEafl^2is (C, n. t, L) {C?^UTIIH^II 
@Wtflfidu$:fflt^Tr (C, n, t, L) =0° mo 



I D I ID) 



[0 0 4 1 ] 'v^"^ 

mi 2] / 

t : = (E„ (D) . H Cdu I 
(3D J: -5 5 c i: 1 5 < 
©3ii!ST-$.5, ) 

f^-iT-'vh?: (1) izLX^mr^ils h^m^^ti 
^g^cDl^SctfaDtCJ^SW^YbC mod nii, A 
ti (C, n, t, L) {cMUTEB^^a©g^ttad„ 
CJ:-3-CE„ (D) $:^^UTJE5§^S^TD_^@^ 

V -5 C £{Ci"-t L ©fflCD IE S S: fill? U v H^^Kfe 
D 'OTfr'&^-^iEB^^gf^'r-<2 ° ~m o d" ri ti-pc 

ColR'a] Sfc, do^-;3[^e^!Sci: LT. 
CO 0 4 3 ] 

ClKl 2] t : =D-d« (L, n) 

[0 0 4 4] f^-r >y h «±3:i: LX^mT^ Xti 
(C. n, t, L) (C?4-LTD{wJ;57?#-fbC° mo 
d ntt, C'C-""-"' mod n^H-^l"^ - 

L ®M®^^t£^ D ©fS^ lEB^gi 2 a^^mt\n-kn^ r> 
gf5:9--C-ti5^'5r -y h t U < tt^SriSfg^E ^Xtl U^£V^P1 
5SilST-tr^ ^fc. f=-'ir>;; h t^aEB^il2(^l^^^tfP• 
^x-^-^5T't£m^2 omimnd^ h (c. n, tT-.. 

"'DtZ^L.-CC mod n grlt^f 5 < 

^'M^±d£i2__^ ' - — ■ — ^ 

[0 0 4 6] iQiis. iy.T«iEB^^jiS®0ij^NCiji.^-ri2 1 
9 cjottii;^?^-^^! 9 4W^1^(S±Tt::^*il-r5. Ufc 
is o Ts 7^ >y ri 9. 4 <73l?*£B;5;^lli ( P r o v e r T- 

^f) s*.'S9«:ciftB^-ri>o 

[0 0 4 7] [2. 2. tS^^^^fST-D 

(IEB^Ii2 3!)SB#it^}^oSSg#S®5^'5r.y SI 3. 
1^19. 0 2 0) !.:AT, ^^IE§g3tEB^§|2i:CO?^IS® 
Sm'Sfi^l^felfTiftB^rs, tiT©<5iJT-{ilIBflii2 0P«9 

[0 0 4 8] SmT'rii^^lg^fi^KCioltSf^lIilSCfflfiS;?: 
0 1 2 joJ;ZJ112 8CZ^L. ^)li?£0 1 3«CtSo-ClftBB 
1-.S)o IEB^§§2©fi?fi!c?:l21 1 2*Jit>-EI2 9C7nb> ^ 
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[0 0 4 9 ] ^Elg3 (i, lglEm?fi^fi!taJ 2 8 6 X^^ 
l/>vC$;^52UT, l2SE«^<^}ta5 2 8 7 lCi3S1-S 

(;^5=--yri 3 1). CWC{i^ iS*{C^<Jffl UfefitSS 
U^-^iJ^ U <. ^ d i: i^jRto ^ n S . C ttSLIKT- S c 

^Etf la^itge 2 8 7lc!8S$h,tC 
i:. ^'J?H^J5!FgB 2 8 8C^j^^i^TV^i,^iEUJ;■5 i: 
rSf^-^^-v hcOiaS'J^ni:S:gi:«)T« igfsgU 2 8 1 i 
•3iiE^I§2-^iifs1--5. 3 2), 

10 [0 0 5 0] IEB^i§2(i;. ^^IEii3A»6i^fl^^^t 

(C. n) ^§fsa52 9 2T-§f3LT, If ^^itSC 2 9 

9fcigsi-ri. (;^7^'y7'i 9 1), ^^-ir-y hsiJ^as i 2 

2tt§{tUfc n{Cj!tg>f ■5j?=-^-^ S» ^>!r'v h^^as 1 

(;:^7^>vri 9 2) , fceU. lfI5S®^'5r.y h bi^Si 
t)75;V'>J:o'2:*i^B^CD3SfflJg®T-(i, ntc^i^i-r 

S:^JS-f SZ2(t-C5.-5, CCi^-g-tCtt. ;^7"-y7'13 2 
^Cib•l.^T^SEi§3i)»e. (C. n) 'ifSffS: < 'S: 

^(D^m {7.9- -jn 9 2) ii^-(f7.y'^:/ri 9 7 

SJc'&s, ;^7^-vri 9 2©$ijscoi^^i: u-cM*£;-r5i 
T> tt««i^sis2 9 gcia^rs c;^^^-^^! 9 7) , 

^^T^-yT-l 9 2cD;^JSCDJg^i:UT?t/S-r5 5^'r«y h$: 
ito^^CJi. f^^r-yht. IEB^S2CD^)liP r o ve 
Ts, f^-^'y h{^»DiS^L$SiOTgB2 9 1 2f^tC-fe>y h 
30 -f 5 (X^-y n 9 3 ) . 

[0 0 5 1 ] ;^7^'yn 9 3 4s|lfT^nfc?>^ ;^7^-yr 
1 9 45^-r5, c®WS®^t:*5(t5;^7^-y7i 9 

4<3Di?li'Si=III$:0 2 OCeSoTlftB^-rS, f*i§5^^.<§<S 
1 2 4CDS2 0rtaJ««i«^SS*''3S£^^ttSLt^O 
m(Dmm time >^__T^£^i'f :*i^rl.^5;§^j5^Jg^PS^ 

i±:«tL-c, 5^-5^ -y ^A*-€-os#/s-c-wa-e*5*'^JS-r-5 

(:;^7=--yr2 0 1) , CCD^^iJ^tCtt. Wa^KhUTS? 

^mti^TnM<omc^\-ft\.\-tM^x^^. p^csjKts 
m^x$)^i^m^x§ f-^ "J v^^^xSi^tPi'S. 

Lfetg^tCJi. ^ l(^)g^SB2 9 3lCiit^TR5. R: 
= 0° mod n®<£acltmUT. «^{S^g0 2 9 
9Ci2Si--o (;^7^>y 7-2 0 2) , ^tlC R<^C<^ff» 

lEBflfl 2 CTJcf®^ 1 (DmW-Si 2 9 3 T-^-'^TltPC L 
T^i>'^*^> f^-T'y h t 6st =D-du (L, n) COJ: 
3CSfi2^n-C''^Slg^CC(i. C° mod n®it^ 
50 (iC C" '-• mod n<Di:r>^^%inX^ ^(D 
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f, mod nSIEBfl§g2(^)i1.-C-lt»U-C, IIB^ 

mod nt^llBMII^2(D^xmf-^t)-^ri,ifW.X-^ 

[0052] ;^7^-;/r20 1 {Ci5^,^T5=•'5^ -y h^ffil^lT- 
^'!7--v h^j^gei 2 1 A>c,^iJS5*LT (;^5^<yr2 0 

3) > Ric^^'v ht^mi^mmx-fjit^-orzzt^^^-t 

SfS (CO0iJT-{il) SiaSUT. tfffi^^gl5 2 9 9 C 10 

i^mth (;<7^>yr2 0 4) . cc^T-i^cLCjhrigt^^J 

[0 0 5 3] ;^7^-y7'l 9 4 3!>s||ff ?^^fec,> 

1 9 3T--t-> h?nfet. Prove rs, L^SJegias 

2 9 1 2*>e>l¥IS5^-ri> (;^7^-y7'l 9 5) , 7.7^^yyi 
9 5^jU<li;^7^>yri 9 TAs^ffSnfcC.. RSrisIt 
35 2 9 1 i?)*^^IE§§3-vSlfs1-S 9 6).* 

C := rand 
send (C, n) 
receive R 
R := R^ modn 
i£C = R 

output ' 
else 

output ' MW 



n^W- 1 1 - 3 1 2.0 4 

20 

* [0 0 5 4] f^lE^3 (i. gfias 2 8 2 {CiJ<,xTI£B§§g 
2i)»e,iS{f $ntR$:§(5UT. tS^iS^ge 2 8 9 (Cig 
^-fS (T-T-yy I 3 3) o R : = R'^ mod 
^ 1 (DmW-^ 2 8 3 T-l+pC UT. ^(7)ttSt^^i)S^|Efg 

<4i^liEa5 2 8 5 T-*'JSt-5 (^T^-yT-l 3 4) « -Slf 
5i:$'JS?nta^a:IEB^S2dsW3aj'a5^^^>v 

gC2 8 1 2 .fc Dai;'7-r5, -S^L'5:U^^:^IJ^^■i^tiS^ 

j&iptsfccDTv r^JSiij Jti*-r?.i±i:'3$:ili::':aJ2 8 1 2 
J; !3iil;t?-r5. 

[0 0 5 5 ] ^:i±i^Pt^(Dmmrjimx-^^, 

[0 0 5 6 ] mS#^«SSBStclSi£r5i:> tiLT©i:iJ 

[0 0 5 7] 
[ai] 



P rover 
if time < L 

R := C° mod n 
else 

i2:= 1 

[0 0 5 8 ] 12 . 3 . miODPtmra hojl^l 40 
(t^IEil3*iB#ffSJ#oSIH#S<7)f^'r-y 1214, 
0 19, m2 1) t^lEg3 i:aH^|g2i:oa'<?coMIS© 

Stc, miEc^>^JlIi:IEB3®#-JlIe:S:S-rsci:ic J: 5, 

M75:s«sigfs^i^t?5^'5r>y b^m-(Dmss.i,zj:^x'mm. 

Xsh, 

[0 0 5 9 ] Sr, mKon^y-a h::;uCZooTlftB« 



tSfg L i: ® g| «c fiS ^ r S ® T- $1 « . 

[0 0 6 0] m^it. ^m.is3±^m^mm^m.mir?,m 

[0 0 6 1 ] M ico^tliT'D hn;K73t^lE§§3®#^)igS 
E14(C, EB^§I2<7)^)IB$:0 1 9 C-en-enticoTlft 

[0 0 6 2] ^IE§§ 3 (i, lf.lEtj5^:££EgB 2 8 6 TaSc 
rS^fiJtUT C;:^?^-^^! 4 1), S^C, ri:-^C08# 



(12) 
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(Dmmt i me iiSrJg^UTf^r b^vCS^fiKUT, 
IglEtS^iS^aJ 2 8 7 iZimti (P^T- ri 4 2 ) . 
m^it. rtt i meC75iK-&(i, C : = r I I t i me 
OJ;3^c«^-r^^«J:l.^. m^i^^WS^Z 8 8(clS^? 

^fc-B-T> j^laSBZS 1 J: "3 ES^gf 2 'Nigff f 5 C^t^ 
r 1 4 3 ) , 

[0 0 6 3 ] lES^gi 2 (D^m<Dm.mi:X7' y r 1 9 3 S 
T-liS^OCDMISCTtPlUT-as, !EB^§g2li. I^IEf§3 
t^e^Tzts^titz (C, n) SSf5SI5 2 9 2T-SeUT, 10 
mni^nS&2 9 9(c!3^-ri. C^T^-vri 9 l) . 5=-^r 
y h^mS^ 1 2 2isSfs L,:fcnC«Jc;f Sf^'Jr-:' 
-ir-y h^^as 1 2 li»c,ggUT. ^5:}^^TV^5 

i^s^JS-r-s (;^7^-yn 9 2), ^So-th^^y 

i^^^2 9 9{Cig^-ri. (;^7^>y71 9 7). MfcSfS 
f^-jr h f^-Jr -y h t . lEB^S 2 CD#Jlf 

Prove r,, f^-T y hf^f^Otf^L $:-tr «y i. 
7^ -i/ n 9 3 ) , 

CO 0 6 4] :X7=--;/7'l 9 3 tfUff ^ixfee.. 20 

1 9 4 S^-rs. ^ 1 03?^S7*n hr3;ufwib-(t-i.:^7^ 
•yri 9 4®P^?&#J1I^I2 2 1 {ZtJ^I-, Cipfjtim 

eSfflaiT'i. (:;^7^'yr2i i) , ccoffltiitciix cA' 

» c> n ft ^ © T(fiO^{T 5 ISl 5 a ^± (S J; t ^ o 
[0 0 6 5] ^JX.IS, Cis23ilBta^^^^TV^T. t i 
meCDft??: I I L I I t-y h i:Smi-«'5:e>fS> t i 
me:=C mod 2 ' "-i J:oTIX5 fcBf Chi^ 
;^7^'yr2 1 IT-t ime$lRt)aiUfc^v L 

2 12), CcOi^JSli, «^;]0?tlgfi?II<73X5^<yr2 0 1 

2{iRi:L/T, R:=C'' mod n^i^lOTS^SB 
2 9 3-C-|f-^bT> tS^lSi^aJ2 9 9t:s2^t-i) C^t^ 
•y r 2 1 3) , ;^7=--yr 2 l 2©^mi: UT^^'T -y hi* 

^^SLT. «^<^^gi5 2 9 9 «ci5^r5 (;^7^-yr2 40 
14). c:cST-*sMi®?^iirD hn;u{c:i5(t5;^7" 
•yT*! 9 4CDP*a'5:¥^JlST-$.5, 
[0066] :^7^'yn9 4 6s^fT$ix;S:e,. ;:;7^>v7' 
1 9 3T--tr-y h$-ntt, Provers^ L^^Kff 
5 (;^7^>y 7* 1 9 3), 7.7-'V-T\ 9 5 U < \t.7.7- -J 
ri 9 7 A^Uff ?ixfe6.s iSfsgB2 9 1 i)» 6 «^IEi§ 3 
RSri^ff-rs C^T^'yn 9 6). 
[0 0 6 7 ] ^*IEIg3(±. Ua^lf 2 i'6ii(a?nfcRS: 
S{sgC 2 8 2 {Z§fsLT. tjlf8{Si#gB2 8 9CZl2^-r5 
(;^7^>y n 4 4) , R : = R' mod n&miCD 50 



4^gg¥ 1 1 - 3 1 2^0 4 
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)||lCge2 8 3T-ltitUT, CCOjf StJ*^6Sfg|Etg|g^^ 

gi5 2 8 7 (cie^$n-cv>sci:-a-r2.i»S:^ m^is^ 

Egi5 2 8 ST-^iISt-i) {;^7^-yri 4 5) , -strsJg 
-S-{ilEB^§§2isW^!J'S^'!7''y hSr^-tJ-Ci/^-SChi^Tn? 
ntcDT-, r^^55t,j ^jgi*1-5til:^$:tB;'7gl5 2 8 1 2 

sai:t;2:iil;*7glJ2 8 1 2 i)»e.fcB±;-r S. 
[0 0 6 8] ia±i)^^ l<^?*ISra S:3;UT-S-5>. lEB^ 
|g2dsB#H-^^t55:<T*.. g^;]<^>mSfiajt(5]i:.«ttgS 

:^Ufe?)'y— h'S:ia(ts r^S&j S:itJ:t) Lfc?). -T— h 

[0 0 6 9] t:i±<D^^^#ilE2:faB&{CSSa>r 5 i:^ JitT 

[0 0 7 0] 
[^2] 

C ;= rand||time 
send {C, n) 
receive R 
R :— R^modn 
lfC = R 

output ' ^5fb' 
else 

output ' Mi^' 

P rover 

if Cniod2ll'^ll <L 
R := C° mod n 

i?:=l 

[0 0 7 1 ] [2. 4 . ^2©?^IS7'D hzi;i/] 

>M— X*- KS®5=-'5r>y SI 5. 0 19. 0 
2 2) ^2CDMI§7*u Ha;u-c-(i, EBg^jif ci3a>T. 
IEB^i§2iiig(fr5ffiB^tS^<i. mM.m^iz^^'y 

-S, St, miE*)lic•i5^,^T^ IEBfltsiSisw|jEtj||g{c^ 

[ 0 0 7 2 ] zcoro h3;uT-(ilEB^§g2A»'E>^^iEii3 
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(0 0 7 3] ^2CDMI§rD VZi)\y(D. f^lEig 3 OD^Ji 
5:01 5Cii!oTl«,s^bv Ea8§§2co^|li$E 1 9 CtS 

[0 0 7 4] ^iiE§i 3 1/ > i/- C Sr^EfS^^fiJtSC 

2 8 6T-^5£UT, ^IE«a«^a5 2 8 7 {CiSSr5 

(;^7^-vri 5 1 ) o t^iEOcfcot-r^^'T';' h(Z)ias'j 

2^iiEe-r-5 (:^7=--y7'l 5 2) , 10 
(0 0 7 5] lEB^S 2 ®50iS«)«!itn(±. gSJWSflS^Ji: 
;^5^-yri 9 3 ^r-lBlL.-C-fei.o IES^1§ 2 (i. ^i^lESS 
A^eisft^ttt (C, n) 4§fsa5 2 9 27:-SftUT:. 

tf^«}^a5 2 9 gtcisgifs c;^^"-^^ 9 i ) , 

■y hSK^Se 1 2 2liSfs UfcnC?^Jc;-ri>^'r '^^ 

■ir-v Y^n^\ 2 li>e.SIUT. ^^-r-:/ ^$:}#r3■CV^5 

i»i:--5i>^£«S-ri) C^T^^ri 9 2), ^^J^O^mt 

RtZOSig^UT. It^«^ge2 9 9lc:sB^f S (^7^ 
>y7-l 9 7) , *"JSCOi^mhUr?JjSrS^^^-y 20 
oig-^Ctt, 5=-'^ h t . iEB^H 2 CD^JIIP rover 

3) , 

( 0 0 7 6 ] ;^ 7=- 7* 1 9 3 }^)S||^f ^nfe >v 7* 
1 9 4<&||ff-r5.^2©MiSrD h3;i/{rii(t5;^7^ 

-vn 9 4CD¥^JlSCOI¥ififfl'5i^Jlf £0 2 2 lCt£o TtftS^-f 

5. LA»e)Ssi5i±ibfe, t^iES3K:i5idjri.^ 'v-fe— >• 

Miiv Ci:SiS^L.T. IfS^i^gB 2 9 9(^12^1-5 
(;^7^'y7-2 2 1 ) o Ci:M®i^^O;^i£{i, C : =C 
I I MCCJ:oT^]^T-#-5, i^^bfeCSrffi^T, »1 30 
cDiHliLge 2 8 3 {ciiV>TR : = C° mod nSritSt 
UT^ tf^^#a5 2 9 gcISSi-rs (^7^-;'72 2 
2) , CCg-C-i^ ^2 0^5^0 hzn^KciJfti.;^ 7^ 
<y 7 1 9 4 ©Pffl'Se^lliT- S S , 

(0 0 7 7] 7.=ryyi 9 4 4s^^f^i^fce^ ;^7^<i'7' 
1 9 3T--fe >y h^-ixfet. Prove rs^ L^m^T 

s (;^7^'yri 9 5) . ;^7^<yn 9 5 ±» u<!i;^7^'v 

7-1 9 7ii^tf ^nte., R£ii5f5a5 2 9 1 <t5«feilii 
3^':&m-t^ C^T^-vri 9 6). 

(0 0 7 8 ] ^^iE^3tt. iEa^^2S>c,jg{t^ntRS: 40 
§ffge2 8 2T-§{sUT. tS^«i^§6 2 8 SiZtZMTh 

(7;7^-i'n53),R:=R^ mod n«»lcD 
mWSi2 8 3 T-fi-p:LT (;^7^->'7'l 5 4). CtCiftPC 

$ixfcRC!5±{5ioifTi^ ^ilfsia^i^as 2 8 7 tClgig^ 
^^-Cl<^SCi:-§c1-5C:t4, lE^iimiEas 2 8 5 T-^J 
S-fi) (;^-7^>yri 5 5), -g^LT^/^^^(SR<^lT^a<^l 
ffiitJMSrSiOtBUT (;^7^-yn56) . iHtlS&Z 8 

5rjic(*-rstil:^S:tii;'7gC2 8 1 2 J: O£hl:^-ro. 50" 
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(0 0 7 9 ] \:X±.tfi'^2(Dnmrn ha;i/T-feS, *r 

□ m.^m2\^^'r"j v-^^-Dch^m. 

(0 0 8 0] 
[^3] 

diHt^^: (n,^) 

C := rand 
send (C, n) 
receive R 
R~R^modn 
if R = C\\M 

output M 
else 

output ' M^' 

P rover 

M :=L 

JJ := (q|M)^modn 
(0 0 8 1 ] [2. 5 . ^StO^^igrn hnyi/] 
(^V>}tT©[llS#SCD-5=-'y 0 16. 019, 0 
2 3) m3(DMUyo f^-ir-y bCMLTffi 

1^IEi§3i)^l^gBtt«g®SSfa:ff'5:ao F*3g|5^^,«©HST£ 
3 i: of -Sj " ' — ^ - '■ : 

(0 0 8 2] ^tz. ^<Dnm.mn^^tctsi^^mM.m3 1: 

[0 0 8 3 ] CT^K, iEB-^§i 2 i)^i$C)f*3giJ«<!l?:SSftf 
^ii-rs, i^lE§l3{iy-CffiS-r5Ci:'5:<. ?$ffi£}^-:3 

(0 0 8 4] ^IE§§3©?ttS$:«IE1"'5>^*SJMS5: 
(<y, v) i:U-C, f^lE^3<0*$mit^lc?t)^>r5iil8 
tiSi£ (e, v) tT^o tzfzL. £6 = 1 mod 
A. (v) T-^«, ^«Jfflt-'i>f=-'r >y K«ffiltfSL«Cii. ^ 
!iEgg3«D*^tSfS®^lt5Sm^ (v. £) i:. rtSB^^.^T- 
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1 siz^^xiam-r^, 

[0 0 8 5] I^^IEII 3 (i. l^ilEtf a^fiXSiJ 2 8 6 Tf^-^ 

C;^?-.^^! 6 1) , t^IiEUJ;^ tl-^f^-r-y h-coiSSiJ 
?^ni:^^U;tC$> ^i:»TicfsgB2 8 1 J; "JlES^tl 
Z^Nisfs-rS C^T^-^'T'l 6 2). 

[0 0 8 6] IEB^i§2<73SQ!S©^n(i;^7^-y ri 9 3 S 
T-{±S^9]C5)r^lSfi^Ji:(RibT-*S, iES^S2«i, f^IES3 10 
(C, n) ^§ftg(5 2 9 ZTSfsUTs 

ttffi«i#a5 2 9 9{cie®t-s (;^7^-yri 9 1) , f^'jr 

i^i:--56^$:^JS-r5 (T^y^^^yi 9 2), J^tJo-TS^^-'ir 

T. mn^^s^z 9 9{ciH^-r5 (^^T^^ri 97), 

2 0D^JISP r o V e Tss \-M1mmm.L^-t v h 

, -fS 9 3) , Prove rs®-fe>y Mc<t 20 

L J; 5 i i: V i: £ SrSX f},iii-r, 
[0 0 8 7] 9 3 is^fr^ iafe e., 

1 9 4^SfTl-i>. ^3<73)prgrn h r!>'HCj3(ti)::^7^ 
<y ri 9 4r<D^mrj:^mt:m 2 3 {C^l", ISIEtS^J^SK 
§52 9 6 U>i^X^^feJ6£UT, »2c7)^IE««^ 

j^a5 2 9 8 Ci3^-r5 (;^7=--yr2 3 1 ) , xit.. cm 

S T- Tfx U t g«!JCD?>f IS^J (CiJ (t 5 C Oafe^rg i: lll^ 7? ST- 
^T-$So :£j52L.fc;t5:j^fsa5 2 9 1 i)»e>«felEii3'N 
isff-r-i) (:^7^-y7'2 3 2). 
[0 0 8 8 ] t^SEil3tt. ;t^&SffSe2 8 2T-Sf5 U 30 
T. m^«^a5 2 8 9 (CSSS-r5 (;^7^';/7-l 6 3). 
tTSU. UTOSgdbTSiJS^ii, iEB^H 2 iJ^f^-ir 

^^;^$^TV^?5:<Ts R i: LT 0 ^iso t C h 
■r-i.©T-, :tM'Stii-i>Biti^iiit)3 2 8 1 2 

2 8 4tCiJ(.^TU;^^>;^/^i&, 
[0 0 8 9] 

[3S14] 

p : = x' mod ^' 
«CJ:(Jtt»1-S 6 4) , ttgtUtpSris/t 40 

gB2 8 1 i.KitEBM§S2^i^mTZ {7.7- -J^l 6 5). 
[0 0 9 0] lEB^gg 2 li, ,o $:Sftge 2 9 2 T-§fs L 
«^«}^gi32 9 9 {C!2^1-5 •;/ r 2 3 3 ) , 

m2cO)g#gB2 9 4T 
[0 0 9 1 ] 
[ISl 5] 

p : = p* mod V 
cltPL-Ti). S2(7Dl?IEtS?a{S^gC 2 9 8{Ci3S^nT 

4) , ^J:^(73j!S«i: L•r-aL^.cl<^ig^^w(i, y-y-tr- 50 
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i/H[Z\^i&'^\^X. «fa®^gi5 2 9 9 ci3^-r5 

MtCO^i&SUT. miS«^Se2 9 9 {Cl2^LT 

>y r 2 3 5 ) . l*lgi5«Sg^l#a5 12 4^^2 (^f*]gl5«.« 

> h-rs (;^7^'>7'2 3 6) , ^5^>yr2 3 6 *) U<tt 
;:^5=-'yr2 3 9tSsSff ^nt?,, i L <t "J f^c, 

nt±|iSfiSi iiitSr* (;^7^-y7'2 3 7) . T.y'-jy- 
2 3 7cDttSt®^llhU-r, i nOfiSii i WT®lg-& 
(i. ^10)SSta52 9 3T-R : = (C I I M) " mo 
dn?£ltS:bT> tSmJ^gP 2 9 9 (CieMif 5 C^t'-;' 
7*2 3 8) , ^7=-f 7*2 3 7®tfc®®i^*i: UT. * r> 

4.»;t) inOiStSffi^^iaSicbT 7^ 7-2 3 1 
0) . f^-r-v hiSj^gg 1 2 1 t SffJUfJUT 
7-2 3 11), R©{tS lCiSSUTm^^i$a5 2 9 9 
{C6B®t--5 (;^7^>y7"2 3 12). CdST-i^x ^3© 
nuru vzi)\,izi5\,^^7.'rvri 9 4<Di¥*ffl'5;#JiI-r- 

[0 0 9 2] 7kib\ ±®lftB^T-tt i ni^^aSSM 0 tClS^ 

[0 0 9 3] ;^7^>y7'l 9 4tf^fT$nfee), ;^7"-;'7' 
1 9 3T--tr h^ixfet, Prover,, Lf:g?|S!<-r 
i, (;?.7=- >y 7* 1 9 5 ) , 7;7" -y7'195*,L< ttJ^T^ >y 
7-1 9 7i)SSff^n7ie.> 3gfta5 2 9 li>e.^^iiE§i3-^ 
R^risfS-rS Ut^'^'T-I 9 6) . 

[0 0 9 4] j?^IEil3tt, iEB^it2 A-?.igfs?nfcR& 
Sftas 2 8 2 KTSff UT, tf atSi^gP 2 8 9 CI3gi1-5 

C^T^-yn 6 6) , R : =R^ mod n<£^l® 
SP[a5 2 8 3-C-itW-ri) (;^7^'y7'l 6 7), COttP: 
^^®±{5C0ffTi^. ^.IEft^«^a5 2 8 7 K:|g^$fxT 
l>5Ci:-3cr-5*-S> IES^4*^iEgi5 2 8 5T-*'J^-r5 
C^^T^-yT-l 6 8) , -S-ri.^^(ilEB^ii2*^=&3a'& 

*fiJ;5ISl!3tiibtMS. lEBBIf 2i)^e,§(tlX^fem^i: 
UTlX»)i±5UT (;^7^-yri 6 9), ill :b SB 2 8 1 2 6» 
(^thti-ti, -^L^\.^m-^ittEBm2t^^^^rji^^-y 

zmti^iiitlSiZ 8 1 2i»c,ai;t7f 5, 
[0 0 9 5] ti±i)^m305c^lS7'D Hn;i/T-fe5, ^ffi 
4^-:)}^IEil3{i8^«)?)nt!5im;t:lt, f^-T h ®^liE 

t^x-§?>, St. !^^t5:^#t7S:v^^^lIig3-c•^>, t-;^^ 

&^^!ET•#5, ftiiEif 3®a:t^4so©B#;«(t■9■ 

-^^;^&jg^^toT. xnia^^OfSCDBf tC^t^U'Sl'^.t^ 
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[0 0-9 6 ] * * [^4] 

4*«S:»2E-r5«*tft»«: (J,*/), fc^iTLeJE IroodACi/) 

C := rand 
send (C, n) 
receive x 
p := mod V 
send /> 
receive £ 
R := ii^ mod n 
lfR = C\\M 

output M 
else 

output ' M^b* 

Prover 
i.|t£||i:=X 
:= rand 
send X 
receive p 
. p := modu 

tn ~ «f» + 1 

:= 0 

else 

M := 1 

if tn < t 

R :» (Cl|M)^nK>dn 
else 
free In 
delete t 
H:= 1 

[ 0 0 9 7 ] [2. 6. ^4CD^|grD hnyu] 40 

(M7tm^u&^^\Bi^^m<D^^^y mis. 019. 

112 4) B4c^?^|grD h=3;i/T-{i. S3t0^igro h 
;uCi3Mt i» h (5ia{c u ;^ >;:^(:D^5x;[Ei^^ ^JSSr 5 

fi^ T^cC t^lE# S $ n t ^iJ ffl [Hi ^ 7C ^ r ^ C ^ i)i T ? 

[ 0 0 9 8 ] Z<Dra ^r2;i/T-(il^lEtg3 2b^?)IE9^§|2 
(C?^UT. ^^IE§g3::)^^«a^T-$)^C^h^lEi§3cD 1 
h(7)fi7i^ (?t/St-SF*3S5ttffiCC?^UT02ii'9<7)H 



[0 0 9 9 ] cn{C<i:o-C-?-^'V hcD^fTe^^*:^ 

[0 10 0] mtiE^3(Dnm^i^M.T^mmm^<D 
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2 8 1 3 J: ?5 Xtl^n-C. Xtl\n^^nSi 2 8 1 1 (cia 

[0101] i^iEig 3 itmmm^^szsi 2 8 s r-f^-*- u 

^v'CS^EfiXUT. lglEtS^«^a5 2 8 Ticiss-rs 
(;^7^>yri 6 1), tftlELJ:^ t-rSf^-Jr.;/ hClSSiJ 
?^ni:^fi£L/iCS. ^i:«-risfsg52 8 1 i^EB^M 
2'~^is{5r€> (;^7^>yn 6 2), 

CO 1 0 2] EB^ig2{i, ^^Eig3i^e>is^s^^^t 10 
(C. n) ^S{saJ 2 9 2T-SfsUTs tg^^J^SB 2 9 
9 tlggifi. 1 9 1) , 5=-^-;/ hS?5^Sei 2 

2ttS{5Ufen«C«je>1-5f=-'ir-;/ h^f^-'T-v h^^SiS 1 
2 li»e.SSL/Tx ^-r-;/ ^-5:^oT^^5^)»^;•^4^$;^J^ 
-r^ (;^7^-;/7-l 9 2), J^io-rS^^-Jr-;/ hS^Ac'Sv^ 

9 9{Ci2S-r5 (7.7^ ^yyi 9 7), M^I-^^^-lr h 
5:J#-3iS^«c(i. 5=-'r«yht, IEB^|g2©^)lIP r o V 

■93), 20 

(0 1 0 3] ;^7^>:/n 9 3ds^?f ^-nte.. ;<7^>vr 
1 9 4S^fT-r ^.4o?^isrD h3;utcij{ts;^7^ 

iEtt^^fi£a32 9 6T-f^>l/>£^;c5*fi2UT. ^ 2 cD 

i?.iEtf ^isj^aj 2 9 8 izfdmr^ (7.5^^7-2 4 d , 

7=- >y r 2 4 2 ) , 
CO 10 4] t^iEii 3 it. X €:§fsa5 2 8 2 T-SIt b 
tSS^^gP 2 8 9 C^T^ <v 7" 1 6 3 ) . 

;Ki:UTO^§faUfcig^(i, ES^gf 2 A^^'^r h SrJf 30 
-3TV^^<T, Ri:L.T0$:iEoS:C:i:^.€i*t-5® 
T% rM3<t,j ^,%(?i5t--5iii;t;S:tB;'7§l5 2 8 1 2 i^c.til;'! 

stt^-rs (.7.7- 'vri 6 4), *-r. »2(D?ii#gs2 
8 4(ci^^^T^-^:^<>;^ pS> 

CO 1 0 5] 

C?& 1 6] 

/O : = x' mod v 

^2(73?||p:gl5 2 8 4 {Z^i^^T. 40 

C 0 1 0 6 ] 
CSi 1 7] 

p : ■=■ p' mod 1/ 
^i^Wt^o 7.y^-jyi 6 4CiJ(t5p®ff#tt. ^^■ir 
•y h©SSSt©•f^g€:^Tl'^^:V^lg^{CKxz : = 1 i: UT« 
^T-J ^coSSt©3clS$:ff^^t^.^lg•g■^c:tt/^ : = 2 t: U 
T> 

C 0 1 0 7 ] 
C2i 1 8] 

p : = x'" mod 1/ 50 
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$:lt»U-r*.|5]aT-SS, Xy'vn 6 4T-|t^Ut^ 
&is{tg62 8 1 A i3iiEB^S2'NH|ff-rS (;^7^-yri6 
5) . 

c 0 1 0 8 ] mm 2 fi. p ?&§egi5 292 x-se u 

T, tifffi^i^a5 2 9 9{C§2^t-5 (;^7^-yr2 4 3). 
m2cDS»gB 2 9 4T- 

CO 1 0 9 ] 

C^l 9] 

p : = p' mod V 
S:it#U-C. ^2®sgEmai^i^ge2 9 8tCl3^$nT 

4) , ;^7^-yr2 4 40$iJSOifS;S6^-Sc1-i>i@-&«C 

M{C0 5:SSbTtt^«^gC2 9 9{CieMfeUT. ft 
gl5«,^«i^gS 1 2 4{csi^^^^-ct,^5*'j7>^' in©fa 
^r-f 1; > M-5 (;^7=--y 72 4 5) , ;^5^-yr2 
4 4©^J:5CDjgMi)S— gtb'5;V>ig-&lCfi, ^20SS[gP 
2 9 4 T- 

CO 1 1 0] 

C2SC2 0] 

p : = p' mod V 

sttpcuT. ^2cDg'.aEts^«ita5 2 9 scia^^nx 

8) , ;^7^-y r2 4 8®2j3j^roifg;^4s— Scf Si^^C 
tt,' M{C0 «iaSL-Ctf^«itge2 9 9(c:§2^L-C. I*) 

a5*t.^^}#a5 1 2 4®m2®?ggBt^BgiS}tgeicfit«$n 

TV>S*'i7>^' i„Offl?£0tC^STS (;^5=-<yr2 4 

9) , ;^7^>y7'2 4 8CDfiJSOiiS^6s— 

tt. p< ^y-fe — i^MCl tS«^^aJ2 9 9fC 

Ig^-fS (:^7^-y7"2 4 11). X7^>yr2 4 5 U < 
ttJX7^-yr 2 4 9, ;^7"-y 7*2 4 11 d^^ff ^ Hfe e>> 

^•2 4 7) , ::^5=--y7'2 4 7COttle<C3^:^i: LTx i„ 
cDfiSi^ i \:X~(Oi&-^^. m 1 CDSS^SS 2 9 3 T- R : = 

(CI |M) " mod nSlt^UT. tf ^^itSB 2 
9 9(Ct2g-r-5 (;^7^>y7-2 4 8) , ;;7^>y 7-2 4 7® 
itS©i!gmi: UT, *'i7>^' iai^ i <£ 
tt, RCDfilS: l{CSS^LTtf$S«i^gi5 2 9 9lc:fg®1-5 

(;^x-yr2 4 10), zz^X-i^f^4<Dnmra ha 

C 0 1 1 1] ;^T^-y7*i 9 4 4^^^f?^^^:e>. :^=r-jr 
1 9 3T-lr-y f-^^xtt. P rovers. L^m^T 

5 (;^7^-vn 9 5). ;^7^>yn 9 5 u< (i;^7^'y 

n 9 lii^m'n^tltz^. iz{s&2 9 1 A»C)^IES3 '-^ 
RS:i=fs-r5 C^T^-yri 9 6), 

CO 1 1 2] {^IE^3fi. Ea^i§2i*c,jSft?ntR^ 
S{tgB2 8 2C§fsU-r, m^^J#gC 2 8 9tCl2Sif 5 

(;:;7^-yri 6 6) , R : =R^ mod n<£^lcO 
ig^gB2 8 3 T-ltP:f 5 (;^7^'yn 6 7), COTlfP 
;^M©±f4®fffi^ isiiEtf ai{S}^gc 2 8 7 CI2S?n-C 



(17) ■ n^W- 1 1 - 3 1 2-.0 4 

31 32 
C;^^-"^^! 6 8) , -ai-2)ig^ttliES^^26s*jajJS: .*T, i .<Dm^m^ i'C^^l^X. :^:ry r 2 4 5 X->( 

LX^OihLX (;^7^-vn 6 9) > J±5±lgi5 2 8 1 2 i)' 'S.Bmx\t. Xt-'-j^Z 4 9 <7)jS»®7tigB#{C i „«: i 
(i,[^ts-r^, -SJU'3:<<>ifi^(iffi8^§i2 3!)i^ja^£f^^-y (^15:^1-5. ? e> CgiJ^^ff^fiPJi: UT. ;^7^-;'r2 4 9 

saj;t;&itS;'3aJ2 8 1 2i'e.ai;'7^S, [0 114] 

[0 1 13] W±tf^4flD5ftfSrD hr];i/T-fe5, ^4 [a 5] 

O^^IST-D hn;i/i:|5i«®^tg^SI#fc1-5S:i^fi?'Ji:L * 
»iES^fflffl«: (r,jE;) 

A;^: Me {l(@ft<ofH«m7j^).2{l5l«:o^affi*)} 

C := rand 
send (C,n) 
receive ;t 
p := x'* mod *< 
aend p 
receive iZ 
ii := ii-''mod« 
if R = C\\M 
output M 

else 

output ' 

Prover 

Hkl|i:=i 
X := rand 
send X 
receifve p 

:= x„ + 1 

jw::=o 

p — ff mod V 

in —0 

Af :=:0 
else 

:= 1 

if i« < t 

(CllM)^modn 

K:= 1 
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[01-15] [2. 7. ^sromsro 

(7.^>7'ti-\'SL^^-y 1317, 019, 02 

5) mt(Dm^ru v3)\,-x:\-t. ^m^^-^mt^^n 

[0116] St, -JSaWftt^liE^tc^L-C^jf^'ir-y h 

[0 117] ^liEil3fiCi!t5fliS:«IITi.#SltSSicO 

((5. y) iDJ;t>-^glltSS© (£, v) , 10 

§12 1 7 {Ct^oTIJJB^L, iE8^§§2©=JIIS:l2 1 9«Cti£ 

[0118] t^IEfg 3 li, ^mmm^^.^ 2 8 6 
l/>i^C5:^seUT. ^iim^«^gB2 8 7{z!2Mi-r5 

(;^7^>;/7'l 7 1), t^SEUJ:^i:-r-55^'r-> l-(^)saS'J 
?ni::£fi£UfeC<£, S htoTisfsgB 2 8 IJ; OSEBJ^ 

2^m.m-r^ 2) , 20 

[0 119] iiEB^i§2{i, 1^IEI§3 4'6Js{t^rnt 
(C. n) S:Sfta5 2 9 2T-SftLT> tt^^S^SS 2 9 
9{Cig^1--5 (;^7^>;/71 9 1) , f^'Jr.y hSg^aS 1 2 
2{iSff UfcniC^ffD-rSf^'ir-y h^T^'ir-;/ h^i#gi5 1 

-rs (^T^-^ri 9 2), ntB-r^T-'Tv v^m^^^^ 

9 9CI2^-ri> (^^T^'^'n 9 7) , ?^j5D-r5f^'5^'i'> 
^J^olg^CCtt, f=-'5^<>hts IEB^il2®^JgP r o V 
ers. Vmmm.l.^'z^y Yri> {Tsr-'yri 30 

9 3), 

[0120];^5^>:/7'19 2ifim.n-^f\.tz^. 7.=r 'jy 
1 9 4§^ff1-5, S5 0?^IS7-D hr3;KCii(t5;^7^ 
•yri 9 4(7DP?ffl7:j^j!gS'l2 2 5 tc^l", ^lEtt^J^fiK 
gC2 9 6ff=-^U>-^;cS^fiicUX, M2<75^,Etg^« 
j#gC2 9 8 {Clears {y^=r-jr2 5 1 ) , :£fi)cUfeA: 
5iS{sgB2 9 1 ipCj^tiEliS-sitfll-S (;:^7^'y7 2 5 
2) , 

[0121] t^IE§g3.tt. x^^m^2 8 2T-Sf3 L 
T, tS^«5^gi5 2 8 9 iClg^l-^ {7.7- -y ri 7 3 ) , 40 
;ci:UTO&Sebtig-&(i, liEB^Ig 2 As^'T -v h- Si^ 
oTi.>'5:<r, Ri:LT0§iEofcci:$:.fci5S-r-i)C0 
T% ""ffiS&j §SiS!«-r-5ai±ii£iii±jgB2 Z\2ifih\^-h 
LT, ?tSrn hr!;u=£«?7r5, M2<©?1l#gi5 2 8 4 

[0 12 2] 
[fl2 1 ] 

O : = mod V 

CJ;-5C|t^-ri) (;^7^-y7'l 7 4) , itSCUAdpSris 

fga5 2 8 1 J: oiE8^§g2'N32fi-rs c^T^-vri 7 so 
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5) , 

[0123] 2 {i, p SrSffge 2 9 2 TSM U 

-C, tf®S^gB2 9 gtcSS^-rS (;^7^'y7'2 5 3) , 
^2©iiip:gl5 2 9 4T• 
[0 1 2 4 ] 
[J&2 2] 

p : — p' mod V 

sitsbT, ^2®|glEtfla«^#a5 2 9 8tciss$fL-c 
VN^ziipA^, -a-r^i^«:£-r5 (;^7^-y7-2 5 

4) o ;^7^-y 72 5 4©2fiJ:SCDi^SAS-a-r-SiS^lC 
(is f^gB*C-^«J*gB 1 2 4 CD^ 2 (73rtgBttSi^}#Se{C5t 

(;^5^-yr2 5 5) , 7.=r-jr2 5 4<73*J:S(7)SgSi*— 
SU'5:l<^iS-S■^»L<(i;^7^•yr2 5 5 iJ^Hfr^Hfe e>> 
rtSP^JS^i^SB 1 2 4lc5i1^^nTV>5 i„©fii:i:L J: 
5f^?.n&±^fili i:Sl±«<-rs (;^7^>yr2 5 6) , 
;^7='-y7'2 5 e^ttStOifSlli: UT, i„i:iAJ^b< 
^il>ig-&«3:> ^ 160)11^35 2 9 3T-R : =0" mod 
n^tt^LT, ft^«J^gB2 9 9iCig^t-5 (;^7^>y 
r2 5 7) , ;^7^'y7'2 5 6 0itlS0i^:m^bT, i 
i: iii^UV^^g^tt, i„$:0(c:.IS!^UT (;^7^'yr2 
5 8 ) . ^ 1 ©iS^gB 2 9 3 T- 

[0 12 5] 

[JS2 3] 

R : = C ^ mod n 

^tt^uT. tffa^i#a5 2 9 9 icig^-r5 (;^5^-yr2 
5 10), cc^T-i^^scMigrD h3;i/{cij(t5;^ 

T^-yT"! 9 4CDi¥^'5:#^J«T-^S, 
[0 12 6] ^7^>yri 9 4As*fT?nfe?., ;^7^<y7" 
1 9 3T--fe-y ^^n;^t, P rovers, L$:^S5^-r 
i> .(Xt" -y n 9 5 ) . -jri 9 5 U < ti;^?" ■i' 

ri 9 74^^fT?nfeej. i^ea5 2 9 i i^et^iESS-^ 

RSisff-rs C^^^-yn 9 6), 

[0 12 7] tSiES3tt, IEB^S2d-C)iSf5^nfeR4 
S/sSP 2 8 2 CSe UT, tff^^i^gB 2 8 9 (Cfg^TS 

(;:^7^-yn 7 6) o R : =R^ mod n$:^l© 
Sgcas 2 8 3 T-ltP UTtSa^J^gB 2 9 9 Cgg^^l" 5 i: 
3<73H-p:ig;^*^ ISIEmfg^^Se 2 8 7 tCfg^ 
$^^•C^'^■5.Ci:-i!c■rSA^§^ lE^ISt^ESS 2 8 5 T-^i 
SI- -5 7- 1 7 7 ) , 0 5:tB^7 

§52 8 1 2 6»c.t±J±;-r-5, -S(U>5;t'^lg-&tt. R : =R 
^ mod nS:^ 10ill»:Se2 8 3T-$e)tCtt»L-C 
ttS^i^S5 2 9 9 {Cig^t-*i:i:*)C, C©H-»S^ 

^IEf{fa^j*gB2 8 7^CigMi$^^Tt>•i.Ci;-ii^■r 
5*»S, IE^ffimiEa5 2 8 ST-^^iJl^-ri) (P^ 7^^7*17 
8) , y^^-jy-n 8©Jg^is_gtt-5iS^ii. SEB.^^ 
2(^7^'^ 'y his^tS©Jg8St{CilUtCi:$:7n-rOT-, 1 
■^iht}Sl>2 8 1 2 3!)'e,ttl:^-r-5, ;^7^-vn 7 8 
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[0 12 8] i:J.±t^mS<DPtmru h:2j\yX-^^o [0 12 9] 

{Bi^oPimt^^-orzm^^mPa^^-^t^fzisbo^Tn^ >* [se ] 

^J^mm^: (n.E) 



C := rand 
send (C, n) 
receive x 
p :=X^ mod t/ 
send ^ 
receive i2 
i2 :^ modn 
if C = 

output 1 
else 

R — iJ^ mod n 

ifC = « 
output 2 

else 

otitput ' ^Sjj' 

Pr over 

X := rand 
send X 
receive p 
p ~ p^ mod 
if p = X 

in. := in + 1 

else 

if t« = * 

iJ := modn 

else 

[0 13 0] C2-. 8. meoj^isrD hrjyu] 

19, 122 6) ccD^B^tct;lt-i)^6CD?^J§7'n hn;i/ 

{c 4?!) 6 n t ^ 2. h n ^ tftiiEii 3 ii^ -r 



[0131] -^fl«J'dtl^ffi#fC?tUT*)7^'5r-;/ hc^^Sj 

[0 13 2] ZCDPi^ra h^Jiy-rHt. miEil3 4'6qI 

Jo -r 5 ^ ^ ttffifSlft AHcii ? n 5 . 
[0133] j^lEH 3CCi45fffiS:gfe|E1-i,1^SJtSiacD 
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®^^IE^3©*)iS5:ia 1 8ic, IEB^i|2cD^llI^ia 1 9 

[0134] tktEm 3 tt. l?.IEtf S:£J5Ka5 2 8 6 X-^^ 
1/ > •>• C U T . l?IEtf la^^SB 2 8 7 13^1" h 

{:^v^^'jy'l 8 1). t^liEUJ:^ ii-fi.f'-^r-;' KC^S'J 
?ni:£j52UtC^. S h^TisftSP 2 8 1 J; ffiB^^ 

a'^iSftrs (;^7^>yn 8 2), 

CO 1 3 5] lES^ggza:, t^lEi§3i>6isfs$fLt 10 
(C, n) $S<sgl5 2 9 2T-SfsU-C> if ^^J^SS 2 9 
9{ClgMif 9 1) , 5="^-^ hSI^gCl 2 

2^i§fsu:^^n{c5^^^of hSf^-tr-;' h^^se i 

fi) (^^T^'^T-l 9 2). M^i5f Sf^-Jr-;/ ^&^&'5:''> 

9 9CI2^-ri> (^^T^^yn 9 7), nSBTi>'^'Tv h 
^-Jr-^ht. IEB-g§g2®^JIIP r o V 

9 3), 20 
CO 1 3 6] ^7=- '^/n 9 3 A^nff e,, ;^-r--yr 
1 9 4$^fTrs. ^6W)!^|g7'D hn;u{c:±s{t^;^7^ 
9 4<^)i¥iW'&^)lSSE2 efCtieoTiSiS^f i>, IS 
SEff ^^JSeSB 2 9 6T-5^-\'b>i^;c$:ifi2bTx ^2® 
^.iEtf S«^a5 2 9 SfCfg^f -5 (;^7^'i'7-2 6 1), 
^fiicbfcA:«:3sfsgB2 9 li^P.t^lE^3^iSft-ri. 
-y r 2 6 2 ) , 
CO 1 3 7] t^lES3tt, ;*i5:§{5a5 2 8 2T-§(sU 
T^ tt^«}#a5 2 8 9 {Ci2^-r-i. 8 3), 

xtUTO^SfsUfeJ^-^tt. iIB^fg2ii5=-'5--y hSrit 30 
oTV'>?£<T. Ri: LTOSris^feCttr^iS-rs® 
T-> r^^j S«i?j5-r5£il^^!±l;'7a5 2 8 1 2i»c,tB;'7 

LT. nmru h n;u5:S^T-r5. A±ife 2 a i 3 i 

A±;^?xTA;^?tf^1S^SC2 8 1 Wz^tbtZW^-^tiX^-^ 

CO 1 3 8] 
CJS2 4] 

^> : = (;f I I ;^)* mod u 
zisfWti (^T^-vr.l 8 4) , H-»:U75:U;^*>^P 
S:3sfsgl5 2 8 1 it) lEsm 2 'vi^ftr^ (^5^-^7-1 8 40 

5) , 

C 0 1 3 9 ] lEB^ii 2 tt, p ^Sfias 2 9 2 TSd U 
T, tfii«i#a5 2 9 9 C!2®r5 (^7^>i'r2 6 3) . 

m2<^mwsi2 9 4-c 

CO 1 4 0] . 
C3S2 5] 

p : = p' mod u 

^ifWLX. tf?g«^ge2 9 9(cigg-r5 (;^7^'vr2 
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6 4), ^ 2 (^l?IE«?fi{S^a5 2 9 8 ^ci2^$^^-ct,^ 

(;^7^-yr2 6 5) , ;^7^-v7'2 6 5 cofiJ;£co*S^is- 
gCU'Sf'^J^^fCii, (*!gS«,^«^a5 1 2 4©(*lgi5«.^ffi 

•yH2-i^tUTM : = 1 I I inSia^UT. 

g8 2 9 9(cS2S1-5 (;^7^->7*2 6 13),;^7^>yr2 

?><a^lRt)ajLT, i „CDfiS^: in : = i„-x^©J:^{C 
iS^-rS (;^5^';/7'2 6 5) , M : = 0 I | i 
LT^ fS^^?#a5 2 9 9 (c:l2^1-^. (;^7^>yr2 6 

7) , i„i^O J; 5'h^<'>*»^J:S-r5 (;^7^-y7'2 6 

8) , Oi5'Jx$U''^^{C{i, P^as^Sg^^SBl 2 4 4^ 
c, i„^&)S3tUT (.7.y^yy'2 6 I 1) . ^^'^ 

gCl 2 16»e, t ^^iJBSs-rS (;^7^-yr2 6 1 2) , VnT 
ncDS^T-±.> M lcOiSS:gl5 2 9 3 T-R : = (C I I 
M) ° mod n$H•#UT^ tt^^^a52 9 9{CS2 

(x7=-«y7'2 6 9) , ccgT-i^^ecM^rn 

ha;i/{C:felt-5)>^7^>y7'l 9 4®5¥iffl'fe#lliT-^5, 

CO 1 4 1 ] ;:i7">>ri 9 4i)S^?T?Hfe?). 

1 9 3T"lr>y h^nfct. Prove rs, L$:l?R^-r 
5 C^^T^-yn 9 5), ;^7^-yn 9 5 U < fi;^v^>;' 
ri 9 7i>s^^T$^^fe5>^ .igfiaJ2 9 li^c.miEi§3'N 
R^jgff-rs (:^7^>:'7*1 9 6) , , 

CO 1 4 2] t^lEig3fi. SB^fi2 4-?,igfl$ixfcR^ 
seas 2 8 2 (cSft UT, tt^^^giJ 2 8 9 (CSg^-TS 

(;^7=-<yn 8 6) , R : =R^ mod n$:^l® 
^#^2 8 3T-f1-S:bTtt^^^ge2 9 9{Ct2^t-5 

(p^7^'>n 8 7) , c®t^■^i^m®±{sra^f^4^ isse 

tf^«^glJ2 8 7!Cf2^^n-CV>-S C J^-a-rSA'^^ 
IE^ffi!^iiEs3 2 8 5T-«^-rS (;^7^>yri8 8) , - 
gC-rSS^te, RCOT{a®^fTi^^)M$:^!?ajUT 
-yn 8 9) . iil;'7gi52 8 1 2 ipC)£B±;f 5. — StU'St 
i-^a-^ii, f^jgjj ^3g(*-r5i±J:^$rtil±fa5 2 8 124- 

CO 1 4 3 ] l.:J.±^^^6<7)?^|gr^ h3;i/T-fe-5. 
CD'&t^1^IEIi3T-^> u:^rf?>;^pCil^7fefS (^Jx(S 

1) $:issci:-r% ^'t^v^'ofasrSis-e-rtc, ti^y 

CO 1 4 4 ] 
[^7] 
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1#«l»IiE**««r«: (J,f) 



(7 := rand 
send (C.n) 
receive x 

p ■■= ixWf^y mod 1/ 

send p 
receive iJ 
R:= R^modn 
if R-C\\M 

output M 
else 

output ' SH^' 



Prover 
3j := rand 
send X 
receive p 

p:=ffmodi> 

in := »n - f* 

ift. <0 
free in 
delete t 

else 

- M := 

R:= iC\\M)°modn 
[0 14 5] [2. 9 . S7®?t^rn hri;i/] 

8, 019. 027) co^s^«c:±3it-sm7 05^risrD 
CO 1 4 6] ^6®?rsrn hriv'uiiisi^fc, — jjawTSt 

[0 14 7] dC^^fgro hn;i,T-tt. ^^IEil3A»6°I 

[0 14 8] ^M.^3(D^m^^tiTi>nmm^<^ 
(c5. v) jb'jiu'^gats^® (£, u) , f^-r-yHMaj 



fgrn h3;uOt^ail3CD^Jlg$:0 1 8 JC, lEB^ii 2 © 

[0149] ^IEi§ 3 tt. gSSEW««Efi2gB 2 8 6 -Cf^i- 
40 U>->-C5:^fixLT. ^IEte^«i^gB 2 8 7t:|g^1-i> 

(t;?^-^^ 8 1), fifilEUJ:^ trs^^'T-;' hco^SU 
^nt^fiZUtCS, *hS!)-Calf5a5 2.8 1 i5IE8^i§ 
2-vig{fr-5 (;^7^>y7'l 8 2), 

[0 15 0] EB^||2{i. 1i^lEI§3i^e>iSfs?nt 

(C, n) 5:Sfsa5 2 9 2 T-SfsUr, ttS^^gC 2 9 
9{c!g^-r« 9 1) , ^^-v hSI^Se 1 2 

2 1 6>c,SU-C. 5="^ hSri*^ri'^-5i>i:dzi'^*'lS 
(;^7^-y7-l 9 2), -y h^rSfc'Si'^ 

50 ig^«c{3:, u;:;;t<>;^Rt::0 ^asuT, tS««?#gC2 
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9 giC-gB^-rS i.7.=r"jy\ 9 7), ^fofS^'^'-v h 
5=-'5r.yht. ffiB^iiZCD^JIgP r o V 

9 3), 

CO 1 5 1 ] 9 3tf|l?T?n/iC,v T^T-vT 

1 9 4 &^ff l-i>, m7a)^i§rD hri^i/fcijit^;^?^ 

•vT"! 9 4<7)i¥jffl'5:#)ii&l2 2 TiCttoTifiB^-rS, IS 

^,iEff la^itas 2 9 8.{ci5ai-r5 (;^7^-;/r2 71). 

^fiScUt;«:erisisgP2 9 1 6>c,t^lEi§3-Nj£{frS 10 
7^ -y r 2 7 2 ) , 

CO 1 5 2) <!^IEg3(i, ;e$S{sgl5 2 8 2 -e§f3U 
tgia«}^gP2 8 9CIgMi-ri) 8 3), 

;ti:UTOS§{f L^:ig-&li. Ea^|g 2 i^^^-^r <;/ h 
-^TV^'5:<T^ R t UT 0 5iso75:C ii^rjg'S-f 
T-s r^^j $:3ici5S-r-Siii:^^tii;^SB2 8 1 lis^h^ti 
UT. ^^ISt-d M3;u2:*IT-r?., A^fSC 2 8 1 3 J: 5 . 
A;t)?ixTA*{f^«l^ge2 8 1 1 {c^*:)Ig^$ixTV^ 
fc^ -y-lr— >-/zSrfi|o-C, » 2 (OSS^gB 2 8 4 ^Ci^V^7: 

C 0 1 5 3 ] 20 

C^2 6} 

P : = I I Ai)' mod V 
^ritPCfS Cx^-yT-l 8 4) , lt#LfcU';^#>^P 
^isfaaJ2 8 1 iDSEB^gZ-sigfll-S (;:^7^-yri 8 
5) , 

C 0 1 5 4 j iEB^H 2 tt, p^SffgC 2 9 2 r-§ft U 
ffa^j^gB2 9 9{Cl2§i1-5. (;^7^-y7'2 7 3). 
^2<:Dg||?gi5 2 9 4T• 
C0 1 5 5] 

CIS2 7] 30 

p : = p' mod u 
^ItPtUT^ ttl5«^a5 2 9 9 {Cl3lgf 5 (;^7^<yr2 
7 4) , m2CD^.IEmia«i^gB2 9 8Cig&^nTV>i> 

(;^7^'yr2 7 5) , ;^7^-vr2 7 5 OD^J^OiK^i^- 
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SCU'5:1.>1S-&{C(±, rtaJ««l«^^ge 1 2 40^2(7)1*1 SB 

T, p< ■y-fcr-v'i: UTM : = 1 I I i„?£:aS:SLT, tt 
|g^}^rg5 2 9 9(c!e^f S (;^f^>y7'2 7 1 2) , 

J;-5«C!ffi^T5 (;:^7^>y7'2 75),M:=0||i„ 
^!aSbT> mf6{^*tge2 9 gJCieiil-i) (;k7^-y7-2 
7 7) , i^i^O J: !3'J^^U^6>s|3JSr2> {X=r-J7 21 
8) , 0 J: ^)/J^$V^^■&C^i, i„S0(C^S-r5 
7^-^7-2 7 1 1) , l^r^^cDJg^-C-*)^ S10S#gC2 
93T-R:=(C||M)'' mod nSff-ffUT, 

ff^«j^a5 2 9 9 ici2gi-r5 (;:5.7^-yr2 7 9) , cc 

£t-A*^7£0?tlg7'D hr3;i/CCiJlt5:^7=->yn 9 40 

CO 1 5 6 ] ::^7^'y7'l 9 4:ifi%n^tltib. T-fvy 
1 9 3T"b>y h^Fixfet, Prove rs^ LSg^lJ^I" 
§ <y 7* 1 9 5 ) . >C 5^ >y7'1954)U< {i;^7^ 

ri 9 ii^nn^t\.rz<b. 3seaJ2 9 1 ipe.t^EHS'v 
RtisftT-s 9 6) , 

CO 1 5 7] ttSEIIStt, aEB^Sg2i»e.ig{t^nfcRS: 

Sfsas2 8 2{c:§{sb-t. mm.^n^2 s gtis^rs 

(;^7^>yri 8 6 ) , R : =R^ mod nS:^10 
)||Stg|5 2 8 3T-tf-#b-rm?S«^*a5 2 9 9iClSSfS 

(;;5^>yri8 7) , COit^ie«O±ffiC0fi7*^, ^iiE 
tf^^^ge 2 8 7 ^CfH^^j^TV^^. C ii-Sc-r^iJ'Sx 
IE^i£^IEg5 2 8 5 T-$iJS-r-5 C^f^ -y 7*1 8 8 ) , - 
Sc^5ig^(3:. RCDT{aofifi)»?>M$:l5l>)tiiU-C (;^^ 
-yn 8 9) , ai:tjge2 8 1 2i^^\^tl-r^, — Stb'^t 
oS^tt. r^jgjj ^jgr;5!ct-5iB;'7S:iil*ja5 2 8 1 2 i)» 

CO 1 5 8] lil.±is»7 0?^S7'n h r; 5, 

CO 1 5 9] 

C^8] 
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C — rand 

send (C, n) 

receive x 

P ~ (xllM)'^modt/ 

send p 

receive R 

R ;= R^ modn 

ifi2 = C||Af 

output M 
else 

output ' 



Prover 

:=s reuid 
send X 
receive p 
p:=(f roods/ 

»n := in - M 
Af := 0||in 
ifi«<0 
t-„ := 0 

else 

M := 
/i:= {C\\M)^xaodn 

[0160] [2. 1 0 . m80?=flfrD 

([siis#Sf^'5^ y V -mmt • tL^^m u^as. sis. 

1119. 02 4) C(5D^S^{rij(t-5^8®?tl5rD h3 
IEB§^2®p^gl5:yc«8i;bT?^JSr>L, ifSpffl<7535 5miE#A^ 
CO 1 6 1] t^lElf 3®^ltS:^IE-r-5^f^Sctf^O 

(7).«a{b<£^fT-rs©*>£. S^IEtl3C0A;^gl5 2 8 1 3 



[0162] «felEi§ 3 li. ^iiEm^:£fixgP 2 8 6 T-f^-f 
U'>5^C€£fi2UT. ^IEttS«i#gP2 8 TCiSig-ra 
(;^7^-v71 6 1), t^lEUJ:^i:-r5^^-3' hC5SSS'J 
?^ni:^52UtC«:. t t^Tisftge 2 8 1 <t t5 ffiS^S 
40 2 'Niseri. (^^T^-yT"! 6 2) , 

[0163] EWIi2 (i. t^IES 3 Ageism c^t 
(C, n) 5:Srigl5 2 9 2T-SfsLr, tf ««^ge 2 9 

Qtcissri. 9 i) , f^-^r-y h^^ssi 2 

2(iS(sUfen{c?tJc;l-5^'r -y hSr^'T-y ^{S^gB 1 
2 16»eg;?UT. f^-r -y Ti-^ 5 iPi: -5*^2: ^JS 

(;^7^-yri 9 2) . ^iDT^^^-r-y 
ig^fCfi. u;^4<>J^R{C0<&^SUTs tS^«J^a5 2 
9 9(C:iaaro (;^7^-y7"l 9 7) . ^imt^'^-T-v h 
a:^oig-S-!C(i, f^-T -y t , IEB^§g 2 ©^HiP r o v 
50 ers« ^-r -y r/l-^OtffRLS-t -y l^-rs (;2;7^'y7 1 



(24) 
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9 3)-. 

(0 1 6 4] 9 3 3!)i^ff?nfcf=>. j^t^-vt* 

.yn 9 i(Dmmtii^mim2 4fc:?ie^-cisi0^t-2>o ^ 
i2iEtf ?a^^s5 2 9 8 i^iagf 7-241) . 

£fi!cUtA:^iSfsSB2 9 14»e^^IE§§3->.isfsf i) 
7^ r 2 4 2 ) , 

[0 1 6 5 ] ^^IE§g3{±. ;t:^&S(5giJ2 8 2T-SltU 
tS^^^^2 8 9t:i2^-r5 (;^7^>y7'l 6 3) , 10 

T% ^mtdlj ^M^T^iiitimiti&2 8 1 2*»Cjtti:^ 

^^lE^^T^is^t:i±// : = 1 i:bT, f^^'v h-^mt^<t 

fSlg^Cfi/z : = 2 i: L-C, /i©tt^A;^ia5 2 8 1 3 

j:>)-^^xxtimm.'^n^2 3 1 itzis^uTiit. m 

2(73jg#a5 2 8 4 {CiSU'>-C. 
CO 1 6 6 ] 

C?S2 8] 20 

p : = * " mod V 
i:bTU;^^>:^P«tt#t-S (y^T^-yT-.l 6 4) , it 
#UfcpS;jzf5a5 2 8 1 J; t)SEa^lg 2 --isft-r 5 (;^7=- 
«y 7* 1 6 5 ) , 

(0167] lEB^g 2 tt^ /3 SrSlsSB 2 9 2 X'&s b 
tf«^l#aJ2 9 9{c!S^-r5 (;^7^';/7'2 4 3) . 
B 2 coinage 2 9 4 T- 
CO 1 6 8] 
Ciic2 9] 

p : = p' mod y 30 
Si+StU-r, ^ 2 ®|glEW«^J#S15 2 9 8 Cia&^nT 

4) . ;^7^-y7*2 4 4<3Di^JS<:OiK^*^— St-5ig-&tC(i 
X7^-y7"2 4 5©-ft^?!3fC. MtC 0 bttS^^^ 
gB2 9 9lClS^t-5, ;^7^<y7-2 4 4©$'JSCD^gmi^- 

StU'^:v^ls^^c{i, ^ 2 o}g#go 2 9 4 t- 

CO 1 6 9 ] 
Ci!S3 0] 

/O : =?= p ' mod v 
Sri+^UT. M2cDlSIEtt^«i#gi52 9 SCgg^^nr 40 
^^ixtp-b^. -Str5A>*'JS1-5 (;:^7^>;'r2 4 
8) . ;^7^«;/r2 4 8C0^JS®|gSi)*-a-r51S^«C(i 
;^7^-y7'2 4 9(3DR^3!J{Z, l^gCWHI^S^gB 1 2 4 <7D^ 

^oi^i^com. (fifj^isi) (c^sfs, ;^7^-yr2 4 8 

^aSSL-C, tf^«?^a5 2 9 9tC|gSiri> c^y'-yy^ 
4 11), t,^rnw±g-&{c*ji'^r-fe/»:c;:^7^-y7'2 4 7 

©RJ^iJJC. i„<75<Siii0-C-^5*»5tlS-r-i). i.^Ofi!** 
OcDlg^ljfc. ^ 1C0?II#§B 2 9 3TR : = (C I I M) 50 



° mod n$l+»UT> tfia{SJ#ge2 9 9{Cl2^r 
5 (;^f^'y7'2 4 8) , i«i)S0T-'i('^ig-&(±, RcDfiE 

s 1 uTts^^^se 2 9 9 iztmt^ i^T" y y 

2 4 10) . CCg-CA^mSOJPflgrD h:3;U{CiJ(t5 
:;^7^'y7-l 9 4©i$«ffl'5:#^)lS-C-39S. 

CO 1 7 0 ] ;^7^-y ri 9 4is^ff^nte>x ;^7=--yr 

1 9 3T--b'i' l-^nt t. P rovers, L^m^^t 
i) C;^?--^^! 9 5), ;^7"<y7'l 9 5 ^L<l,t7.7--v 
71 9 7is^fT^nte)s i5{tg|5 2 9 1 d»c,t^|E§|3-^ 
RSSil-Ti) (;^7^-y7'l 9 6), 

[0171] l^lEi§3{i, iEB^i§2A-e,Jsfs^nfcR^ 
§{sgi5 2 8 2 {C§{f UT, tS^«i^gf5 2 8 9 {Ci2^TS 

(;;^7^>y7' 1 6 6) , R : =R'' mod n?&^lfl3 
SSaJ2 8 3-CltPI-S (;:^7--vri 6 7). COttff 
i^mo±{53LG5ffTi>5, ^IEiS^1»i^a5 2 8 7{Cl3^$n-C 
. v^5Ct-a-r•5*'^^ IE^^4*i^lEa5 2 8 ST-f'JS-r?. 

(yt^T^yyi 6 8) , -St-r-i>i^-&ttlEHIS2is*^'5: 

Iff i 51X5 til UfcM^, IEB^it2*e>SltS5i-5fcff^i: 
bTlSl5ffiUT (^7^-yri 6 9) , iiJ±ia5 2 8 1 2 i» 

•^ii^S^T, tSEB^il2i>s*J5&?Sf^'5r>v hSJ^^^fcA^'i^ 

8 1 Zt^^mtiti.. 

CO 1 7 2 ] li^±iiB8©^^^^7•^ hz:;uT-$i5, ^-i- 
iaOfilAi ICiSS^nsi:. D S^iJffi bfcL';^4< 

CO 1 7 3] 
C^9] 



(25) 



nr^w- 1 1 - 3 1 ZO 4 



47 

^Hlttr«: in.E) 

Xt>: fi (1: a*. 2: 'firy hnM»<t) 



48 



C ~ rand 
aend (C, n) 
receive ;sc 
^ := x'^ mod 
send p 
receive R 
R := modn 
ifil=C7||Af 
output Af 
else 

output ' ifca* 

Prover 

X := rand 
send X 
receive p 

p := ff' mod K 

ifp = X 

Af :=0 
else 

p := fj^modi/ 

ifp = X 

U := 1 
else 
M := 1 
ifin = 0 

R ~ (C||A/)^inodT» 
ebe 

1 

fre« t„ 

[0 17 4] [2. 1 1 . mgc^isrn ^=:;i/] 
(^^•r-y h^Jffl<^ilEg!l©^fi£, 0 18) c^^B^JCisIt 
-5.^9<Z)?=tig7'o S:3;i/T-{ix l^msW-r i)t^lE#ii^ 

CO 1 7 5] ^cmST-D hn;uT-li{^!Elg3co^lI«fR 
ioTf^-^U^i^'C^r^fiJt-r-iiCili:. (r, R) ^^i 



1 7^^l,^um ScDro S3;u±Ttc®ST-§5. 

[0 17 6] ^i£m3(Dnmi^m.-t?>^^m^(D 

9(Dmay° Ell 8(73t^lEII3(75-¥-Jlg{CiSffl 

ffiH 3 i>c,|iEB^it 2 'vfix. ^ -y-b-i/ A t^HISS 

oA;'3a5 2 8 1 3 x<jxtj$i\x. xtimm^n^2 8 

1 1 <ZSim$tiX^^ZtTZo 

[0 17 7] iSSEtSS^fi^gS 2 8 6(Ciba>T. gL»rS 
10 ^n^rC : =H (r) CD J;^ {c-:^r(SH4S9jS!fC 

ilUrf^^U>-VCSifigL.. ISIEm^^i^gS 2 8 7 
12^1-5 UT'-yn 8 1) . ^KLXv t.ti^^'y 
hODiaSiJ^ ni:^fi£UfcC$r. S iiaTjaftgP 2 8 1 i 
t3iESS^2^ig{t-r-5 (;^7^«>7"1 8 2). 

[0 17 8] mmiS2t^i=,&itlX§rzz^^ §fsgi5 2 
8 2:C-Sf3UT. «^«i^gS2 8 9CieS-r5 (;:^7^>y 
ri 8 3) , ;ci:l-TO<£SeL;t^^tt^ Km^2ifi 
hi^-oXl^^KX. Ri:bT0 2:i2otCi:tr 

20 2 4^c,aitjL-C, ?=rS7*D h.nyi/^ifiJT-r-So *2cd?^ 
ptgg 2 8 4 (ciji/^T u;^^>:^ /3 

[0 17 9] 
[183 1] 

P : = (.X \ I m)* mod i/ 
CiotCfi-^-rs (^.T^-yn 8 4) , itSCUfcpSris 
lias 2 8 1 J; ?) lES^gt 2 'viSfaTS -y 7" 1 8 
5) , 

[0 18 0] aE3§l§2i>c>i£fs$nfcu;^^>;^R5:§ 

{fas 2 8 2 (csm LTx ff^^itas 2 8 9 {cisig-rs 

30 C;^^^-^^ 1 8 6) , R= mod n^m KOmW^ 

2 8 3-r-|+#1-i. C^T^-yn 8 7) . CCDthP^S® 
±{jlOlfiA^, ^IiE{fS«^a5 2 8 7{Ci3^$nT0^5C 

<y 7" 1 8 8 ) , 7.7" -J ri 8 8 T — §C U fciS-&{±, ^^9- 
>y7-l 8 lT-Stfii4bfcgLIBjri:> ;^7=- >y 7" 1 8 6 T-fi^ 
^^gB2 8 9CC!^^U*:Ri:5:li^CUT^ fiJ^lES&tt^ 
^}ta52 8 1 4CZl2S-rs. ?^tC, R®T{2®^fT-t 
IROtiSUfeMS, aEBg||2 4'6S(tSSlofetS?fti:UTai 

^)iiJLT (^7^>yri 8 9) , iiLtiSi2 8 1 2is^^\iLti 
40 rs, ;^5--y7-i 8 8-c— Scu^ipofe^^fi, 
5»j £jgiEic-r-SiiJ:^&di:'ja5 2 8 1 2 i»f>iti:^-r5. 

[0181] W±i)*m9©Mii7-D El 1 8® 

^^SEig 3 co^JHtCilffl U?S:0!|-C-$i 

[0 18 2] S5B=a#^S< |<Jffl#i:KSA 

-r-y hc^W^#{c:Mffi3£i^fi?»^®f^'i^ 'y h ^risft'Sl'^ U 
(^aS-roi:('^3Jfe.<^0^'5^-y K'^II^SrSS'^.^' ^ 

50 p^{csl.^^s?ss^cs^:^s:^^^-r{c5^'r -y i-<73Sfi«*^^^-e 
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CO 1 8 3] |iJffllES!itS?a«j#gB 2 81 4{Ci3^$n5 <fe(73©|f&i^^t)-y-T-«) T «tv>, 

mmt, ^nmm(Di.o^. ^m^z iimsm2(D&\.^ [oi8 4] 

tU:^: M *7tri invalid 



r := rand 

C := H(r) 

send (C n) 

receive x 

P := (xllM)*modi' 

s<end p 

receive R 

if ii^modn = CliAf 

output M 

store (r, R) 
else 

output invalid 

CO 18 5] [2. 1 2 . ^ 1 OC^iSrn hr3;i/] 
8s 1119. 132 7) CO^H^(Ci5(t-5^ 1 OCMS&r 
?f#ISS:^!f*>> ^S^Ot^iErD hn;i/{zi}{j-i.. 30 

CO 1 8 6] ^IEIi3®t^lE#Jlltt^9orD hn;t/ii 
|HH^-e$.5, l.:ATttlEa>gS2(Z)7"D hn;u5:SJH^t- 5o 
CO 1 8 7] t^lEli3®^?li?£«IE1-5#ScttlB© 

(<y, v) ii^z/^mm^o:> (s, v) . ^^^brnm 

^^fgrn Sr3;uot^iEil3©#llg{SM9©?tlg7'a>3 

C3^)li$:ia 1 9 l;^n^?tecoTQ5JB^t-«. 40 
CO 1 8 8] SSEtf SaEfiStSS 2 8 6^Ci^^.^T^ SL^r^: 
*J5K U-enS-^lSH45li!t{cji ur ^-^^ U > C 

S'.IEtf««i#S 2 8 7 (z|g^-rs (;^7^-yri8 
1) , t^llUJ:ah-r5f^'r-y hCD^S'J?^ni:^fi2bt 

^i:toTiEfsgC2 8 1 J:5IEB3ii2'vi2ftr5 
(;^7=--yri 8 2) . 

CO 1 8 9] iEBgig2tt, !^IEgi3 4»c,iSfi^n/r 
(C, n) ^§flgS 2 9 2 T-§ff UT> ttSiS^SC 2 9 

9cias-r-5 c^y^-^ri 9 n » ^^'v kss^soi 2 

2(i:§fiUtn{C)ttio-r -S^r-v h^T^-'T -v h<S?#a5 1 50 



2 liPe.SiUT> ^^-r-v ^S:^•DT^^SA'i:•^4»5:«^ 
-r-5 7^^7-1 9 2). nSBr^^T-:^ V^WtzfSi^^ 
ig^JCfi, u;:^;l<>;^RtcO^IS^bTs ttSi{^itgB2 

ggjcia^fs (;^5^>yn 9 7) , MjoTS-^^-'J^'^ b 

Sri^oig^fCti, 5=-'r-yhts iEB^§|2®#|ISP r o V 
9 3). 

CO 1 9 0] ;i5^->ri 9 3is^fT$ntii)> 
1 9 4i&^^Tl-5. mi Oo^^igrD hn;i/Ccijiti.:^ 
7^ 7" 1 9 4 ®Pp*ffl'5:^)ll(illl 2 7 ©^?gT-S S . I§!E 
tfm^J52gB2 9 6T-5^^l'>i^A:$:^fi!4L''C, »2cogS 
Etta^^i82 9 8K:f3^-r5 (;^7^.-yr2 7 1) , ^ 
fi£Ufe;t:€:i^ftg|52 9 1 *^c>t^!Eli3-vi5fft-5 C^^^ 
<>/ r 2 7 2 ) , 

C 0 1 9 n *m.^ 3 li. ;t: SrSflSB 2 8 2 TSff U 
Ts tfm«?ta5 2 8 9 (ClS^1-i. (;^T--y7'l 8 3) . 
;t t LTO £§ff Lfclg-^tts ES^i§2Ai5=-r>y hS:^ 
•dTV^'5:<T. Ri: UT 0 gjs-pfcCiiS.^i^-ri.© 
T% rffijgjj $:.«!S-r-5i±J±iS:ai:^a5 2 8 1 2 iP^tiitl 
LT> )rt^rn hrj;i/>&$«7Ti>. XtiSi2 8 1 3 9 
A;b^^xTA;^miB«}#a5 2 8 1 1 iZl^sfiiEm^ixX^^ 
fz/- •v-tr-->-/z^goT. m2(Z)ifi^ge2 8 4iC^Si.>T 

C 0 1 9 2 ] 

C«?3 2 ] 

>o : = I I /^)* mod u 



4 




(27) 
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^lt»1-i> (;=i7^-y 7-1 8 4) . iiWLtz\y:^^^'>:^fi 
^H^fsSB 2 8 1 ^ 0IEB^S2'Nigfiri) iTsT^-yyiS 
5) , 

[0193] lEBggg 2 tt. p SSfsSB 2 9 2 T-^ff U 
X. m^^^Si 2 9 9 iZtmr i (;^7^>y 7-2 7 3) . 
m 2 OSPtSB 2 9 4 T- 

CO 1 9 4] 
3] 

p : = p' mod v 

$n-»uT^ «^«i^gi5 2 9 gcgs^rs (;^7^<yr2 lo 
7 4) . ^2<Dmm.m^^w^2 9 aicim^ixx^^^ 

(;^7^<v7"2 7 5) , 7.=rvr2 7 5 (DfiJ^COiigmt)^— 
l!cU'S>''>JS-&{Cfi. ^ 'V-b-i^t UTM : = 1 I I in 
^aSSbT. tSa^^gS2 9 gtCiSMil-S <^7.=r-jr2 

7i2),;^7^-vr27 5o;|3J:scDi^M6*-a-r5J®^ 

;^7^'y7'2 7 6 i:;^7^-y7-2 7 70fti5'3JC, P 
®T{a:®ffifi»e.>ci2:SSl?)ajUT. A:?7tt««i^a5 2 9 1 
ItCia^UT, MtCO SrlSSUTv tga«^a52 9 9 {C 
gg^-rs. ;X7^>>7'2 7 8®-rei5 D i: Ur. f^gSt^.^S 20 

jtic 1 2 4©^ i©F*gget^^«l^g5tci2gi$nTv^i, j 

IXt3i±iL/75:>aJ.:i.±T-fei>i»*'J:S1-'5o j *Sxilii±T- 
« •5ig-&CCttx 7* 2 7 1 1 ©ftfc !3 IC, j:=j 
-Xii:UT j ©«S^MUT^ M : =M I l/zfcUTM 

OC^MU"C> M : =M I I j tbTMOfSS^H-f 
-5, V^r^^^^lS^T-*). S 1 ©SStSC 2 9 3 T-R : = 
(C I I M) ° mod n5:tf»UT..tf^^i^gB2 
9 9CI2^-r-5 (;^7^>yr2 7 10), CCK-CJis^ 1 
OODM^ro ha^l/tZib-ltS;^^--^^! 9 4<DpFiffl'i^ 30 

[0 195];^7^-yn9 4is||ff ^ixfc?), 7.7- -jy 
1 9 3T--ir'y ^?^^tt. Prove Fs^ L$:«?S^r 
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S {7.=r"jr\ 9 5) , ;^7^-y7"l 9 5*)U<tt;^7^'y 
ri 9 7iJ^tf?ntc,x Kf3gl5 2 9 1 A^e<^IE^3'N 
R^H^fffi. (;^7^-y 7-1 9 6). 
CO 19 6] t^lESI3(±, EH^II2*^c>Hl{a^nfcb;< 
;K>;:^R^S<igi5 2 8 2 {C§^5UT^ IS^JtSP 2 8 9 
{CiS^-rS (;^7^'y7' 1 8 6 ) . R^ mod n5:^ 
lCDSSCgB2 8 3T-ltSi-r-5 (;^7^-y7"l 8 7) . 
l+#jgmo±{4cO«Ttf, ISIEtSai«i^ge 2 8 7{Ci2Mi? 
KTV^S Ci:-3cr5i)^S. E^^^t^lESS 2 8 5 T-fJ:S 
f S (;^7^-y7'l 8 8). ^f^-y 7"1 8 8-C— SSCLfeJS 
^tt. Xt^vT-I 8 lT-«ts2Ut5LIBcri:> J^^T^-yT"! 
8 6T-tf^Sj^gB2 8 9{Ci2^LfcRi:S:MCC bT. ^iJ 
ffilE8!ltt^^^ge2 8 1 4{CS2Si1-5, ^?>CC, R®T 
IfiCDfirJ: tJlXtJiiiUtM^, IEHBH 2 i)»c,§(tSXo fett 
«i: LTISI 0 a Ur {7.7- -J 718 9) . tll;tiS15 2 8 1 
2iPe>iU:t7-ri). ;^7^'y7'l 8 8T— aU'S;4»r3fetg-& 
TfeEjaj ^jgi^f •5i±l:trSfcB:^a5 2 8 1 2i)»C)ai^ 

1-5. 

CO 1 9 7] I.>L±i)smi 0®*fi§ro l-3;U-C-^5. ^ 

-y-iz— >-/z©fSrd(ti«p:bT(''>fc. *:7"d h 
Z^i^mtl-^o ^7 05 70 h 3 ;H±. ^^-tr^y Pi^Ji 

CO 1 9 8 ] 
C«ii] 



1 



(28) 
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Prover 

fMe := L 

if J 

X := rand 
send X 
receive p 
if modi/ = ;t||pt 
A/ :=0 
if M <i 
i := i " M 
M—M\\y, 
elm 

M := Mlli 
i :=0 

else 

M := l|[i 
i2:= (C||Af)^modn 

CO 19 9] , [2. 1 3 . ^1 iW^tisT-D 20 
(affitcO?tii7-D COT^s^CiJlt 5» 1 

ISOiEB^^)iM<£fT'5ix?). aEBJ|g2fc:(3:aiScolEB^^JlM 
B^^M<5D^-^■r^^A-€:31^^lbT^ff■r5. ^JIi®ilJRtt5^ 

[0 2 0 0] [2. 1 4. SI 2co?J|g7'n 

^{'t*Dff^^«V^feiEB^^JIICOf^#. S 1 9. 
03 1) c®^B^tcijlt-SS 1 acjJ^lsT'n h:!;i/T- 

IEB^^2CIEB^^JlS5:4-^i)Ci:i)^T-t 5. 30 
[0 2 0 1 ] lEBIig 2 tCSiJjgi^Stf , L (cEBg^JH 
5 c i: .to TfEB^^Iii^^x. i. C i:i)*T- 

[0 2 0 2 ] iEB^^)li0^x.i'fe{S, =)i«^i33ie-r5l5 

jguTis^. -^c^-rn •j/^'®^jii5:i23iemig-r-Lcig 

[0 2 0 3] S 1 2©Jpri§ra hr3;ucDEB^ig2(^^)lI 40 
IEg3<^>|^^IE®||ff05^«f , t^lEif 3 0<i^lE(C'iJS'5: 

^i^eaw^ (v, £) . iEBs^)iiGD^-^g?p,iis^sn7: 

igia;r-?5i:-rs, la* (f , v, e, Po, 
p.. Pa. Pi. p.. Ps) ©ieeSfiZ^aTt-^iii: 

[0 2 0 4] S(5gB 2 9 2 T-«^iIgg 3 4' 6 ( C , n) S: 
SflL-C (;^7^-yn 9 1). tS^«f^gC2 9 9 ClflS 
f^o ^^-y h<3?^gi5 1 2 2ii§flLtn{C?tic:>-r5?^ 50 



11-31 2-..0 4 
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^oTl'>5i»i:-^4^5¥iJ:5-r5 (;^7^-;/7"l 9 2) . M 

SiSSUT, ti^^^aJ2 9 9 5cg3Mit-5 (;^7^>yri 
9 7). Jt^jD-rSf^'T >y h^j^-plS^tZtt, f^'S^^y h 
t, IEig|g20^)IIP r o V e rs> f^-ir-y hf^Sofil^ 
LSr-fe-y hTZ C^^T^-i-ri 9 3) . SI 2®MS7*D 
h3;u-C-te. P r o V e rs®-fe -y ^^•fc<'"''C> Li)»?) 
(f , V, Po, Pi, P., P3, P4. Ps) SrSSiU 

[0205];^7^-yn9 3i)S|ifT^n7!ie,. j^t^'^t- 
1 9 4e:^fT-r5. S 1 ®?*t§7'D hr3;i/{c:ij!t5:^7^ 
•yn 9 4CDl?*ffl^#-lli4113 1 tCTj^f , fi^JCT-feS 

t^n^r^ i o i) . f i^iEuttnK. ;^ 

7=->yr3 1 0 2}£pe.;^5^-y7'3 1 0 9 ST•*^^T1--S. 

[0 2 0 6] ^lEtS^^SESB 2 9 6 T'SLiSx S^EfiK I- 

S2 0^IEtS^«^gB2 9 8 tfg^T-S (;^7^-y7- 
3 10 2) . 3aea5 2 9 1 ii*)^m.^1^X^'-^'^^^^ 

{T^^r-yrZ 10 3), l^iESC 2 c,iS{t?iT7i O 
{*gi5 2 9 2 T§fs LT. tt^^i^SB 2 9 9 tclggf 5 

(;^7^-y7'3 10 4), 

CO 2 0 7] 

CSS3 4] 

p ' mod J/ 

7-3 10 5) . ;^7^'yr3 1 0 SOl^mt^mL^'iS-^i^ 
(i, ;^7^-y7"3 1 0 6i:;^7^-y7'3 1 0 7^^fff 
MCCO ^IS^LTtfSligSgS2 9 9{c|gSt-r-S 

r3i0 6) , Poco^-^i, u < <i^^i?i?:^ff -r-s 

(;^7^';/7*3 107) , :7.y^-:/y3 10 SCOIgllil^^L. 
< ^X^.^i8■S■C(^. ;^7^-v7-3 108i:;:^7^-y7'3 109 



(29) 
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s^ff-fs. Mtc 1 sissu-cmfsiesa5 2 9 9 ic!3» 

{T.'rvrZ 10 8). P.O^-^^ U< (i^^g? 
^&^ff1"i> (;^T--y7*3 10 9), 

[0 2 0 8 ] P,©^^*; U<tt^^S?5:llffr5 
7^ -y 7*3 1 10) . P ,(3D^^-fe U < (i^-^SfS^ff U 
JgS2i^JST-fei>i»^J:St-i> C^T^'^rS 111), 
;;^7^-yr3 1 1 1 cDiigmi)SS;oiS'S-«> ;^x':'7'3 1 1 
2 \i7.7--J-7-Z 1 1 3 ^mfTi, P,(^^^*, U<tt 
^iJ^I?$^fT-r5 (;^5^'vr3 1 1 2) , R : = (C I 

I M) " mod n$:m l<73SS:a5 2 9 3T-i+SU 10 
T. tfa«itgB2 9 9 CieSf 5> (;^7^-yr3 1 1 
3) , ;^7^-yr3 1 1 l©iigmASMt!'&i'^lg^«^i3:. ^ 
7=--yr3 1 1 4i:;^f^<y7'3 1 1 S^n^ti, PsW 
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d^^i U< fi^^g¥SII?fr^ (>^7^-yr3 114). 
R&ltiS:£UT, tfS«SgB2 9 9 tCl3a-r5 
•yr3 115), ZZ^X-t^f^KDM^ya h-=iMZii 
(tS^T^-yT-l 9 4(7)l¥^^^^JIiT-355, 
[0 2 0 9 ] ;^7^<yri 9 4*s^ef?ntc,. t.t'^-jT 
\<^.Z-(:^-j Y-^fitzt. Pro vers. L 
5 (;^7^-y7'l 9 5) , ^7^<y7"l 9 5 ^ U < (i;^7=- -y 

ri 9 TdJ^ef^nt?,, isf5a5 2 9 i i»c>^^iEi§3's 

R$:jg{f-r5 C^^T^-yri 9 6). 

[0 2 10] tJ.±i^Sl 2©^iSrD h3;i/(ci3lt5IE 
B^§g2£D^JgT-fe5. 

[0211] 

[^12] 



